Cargo Theft Is Escalating Across Rail and Truckload—and Industry Groups Want a Federal Response

Cargo theft moved further up the freight-risk agenda on Thursday, October 29, 2026, as rail and trucking groups pressed for a stronger federal response while new same-week cases underscored how quickly the threat is spreading across modes. The immediate picture is not just more theft, but more varied theft: organized train burglaries in Southern California, fictitious pickups of high-value truck freight, and repeat trailer break-ins against food loads in Philadelphia.

That convergence matters because it widens the problem beyond carrier vetting alone. Rail theft exploits exposed corridors, yards, and train dwell. Truck theft increasingly exploits identity fraud, release failures, and manipulated pickup information. The result is a freight-security problem that now cuts across physical access, digital identity, dispatch controls, and claims exposure.

Washington pressure is building around cargo-theft legislation

One reason the story has sharpened is that industry groups are no longer treating cargo theft as a company-by-company loss-prevention issue. The Association of American Railroads and other supply-chain stakeholders have been backing the Combating Organized Retail Crime Act (CORCA), which the House passed on May 12, 2026, according to AAR. AAR says the bill would strengthen federal law-enforcement tools, create a national coordination center within Homeland Security Investigations, and expand grant and training support for frontline agencies. The rail group has argued that organized cargo theft now crosses too many jurisdictions for individual carriers and local police to manage effectively on their own.

AAR’s current fact pattern is stark: major U.S. railroads reported more than 75,000 theft incidents in 2025 with losses of more than $200 million, a year-over-year increase of more than 50%, according to the group’s latest advocacy materials. AAR also says only about 1 in 10 theft attempts leads to an arrest, a statistic it cites in arguing for more coordinated federal prosecution and intelligence-sharing.

Those rail figures align with broader cargo-crime data showing theft severity rising even when incident counts do not rise in lockstep. Verisk CargoNet said estimated cargo-theft losses across the United States and Canada surged to nearly $725 million in 2025, up 60% from 2024, while confirmed cargo-theft incidents rose 18% and the average theft value climbed to $273,990. The FBI’s Internet Crime Complaint Center cited the same figures in its April 30, 2026 public warning on cyber-enabled strategic cargo theft.

Southern California train-theft arrests show rail exposure is not theoretical

The October 29 follow-through also included fresh reporting on a Southern California train-theft investigation in which nine men were arrested in San Bernardino County in a case local and regional outlets said investigators linked to the Sinaloa Cartel. While full charging details were still limited in publicly accessible primary documents at publication time, the reporting consistently described a yearlong investigation into organized cargo theft from freight trains moving through San Bernardino County and nearby corridors.

The broader operating model is well established in prior federal cases. In a 2025 U.S. Department of Justice case from Arizona, prosecutors alleged train-theft crews cut air hoses so BNSF trains would stop in remote desert stretches, then unloaded targeted merchandise into trailing vehicles for movement back into California resale channels. In a separate 2025 Central District of California case, federal prosecutors described suspects stealing cases of construction tools from a freight train in the Mojave Desert.

That matters operationally because train theft is structurally different from most truckload fraud. On rail, criminals can exploit predictable geography, slower-speed segments, remote territories, equipment vulnerabilities, and long handoff chains. AAR says the consequences reach beyond lost merchandise to include railcar damage, worker-safety risks, and service disruption.

The SIG Sauer fictitious-pickup case highlights truckload release failures

On the truck side, one of the clearest October 29 cases involved a $500,000 shipment of SIG Sauer firearm parts and accessories stolen in a fictitious pickup from a warehouse near the 4200 block of West 190th Street in Torrance, California, according to FreightWaves’ report based on Los Angeles County Sheriff’s Department information.

According to that report, the Los Angeles County Sheriff’s Department said investigators received information about the theft on October 12, 2026 and later recovered the entire shipment. Detectives from the department’s Cargo Criminal Apprehension Team (CCATS) investigated the case. Authorities arrested Arman Mnatsakanyan, 26, and Ashot Yesayan, 23, both of Glendale, on suspicion of grand theft cargo, and planned to present the matter to the Los Angeles County District Attorney’s Office for filing consideration.

The case is significant less because it involved firearms-related cargo and more because it reflects a theft method now central to truckload risk: obtaining a legitimate release through false identity, false authority, or manipulated dispatch information. In its cargo-theft guidance, the FBI says current strategic cargo-theft trends include identity theft, fictitious pick-ups, account takeovers, double brokering scams, and fraudulent carriers. The IC3 advisory goes further, describing how cyber actors compromise broker or carrier systems, post fraudulent loads, alter contact and insurance information, and then redirect freight through partially unwitting drivers and cross-dock transfers.

Southern California remains a particular pressure point. FreightWaves cited an Overhaul Southern California theft analysis saying the 200-mile area around Torrance accounted for 37% of reported U.S. incidents, with nearly 70% of regional thefts occurring within 50 miles of the city. Overhaul’s national Q2 2026 cargo-theft report says it recorded 605 U.S. cargo-theft incidents in the quarter, up 5% from Q1 even though activity was down year over year.

Philadelphia’s beef theft is smaller, but it shows the geographic spread

Not every theft involves electronics, luxury goods, or firearms. In Philadelphia on October 29, 2026, police said thieves cut the rear padlock of a truck on the 5200 block of Devereaux Avenue in the city’s Wissinoming neighborhood and stole five pallets of beef valued at about $10,000 while the driver slept, according to CBS Philadelphia. The station reported the robbery occurred around 4:15 a.m., and that the driver had come from Iowa.

By itself, that would be a local crime brief. In context, it is more useful than that. Philadelphia-area authorities have now been warning for months about rising cargo-theft exposure. In a June 8, 2026 notice, FBI Philadelphia said criminals were using phishing emails, spoofed websites, compromised business accounts, and fraudulent load postings to impersonate legitimate brokers and carriers and reroute shipments for theft and resale. Verisk CargoNet’s 2025 analysis also said Pennsylvania theft activity rose 24% year over year.

The Philadelphia case points to another reality that often gets lost in the discussion of digital fraud: old-fashioned stop vulnerability still matters. Sleeping drivers, unsecured wait time before delivery appointments, and after-hours exposure at curbside or informal staging locations remain easy openings for commodity theft, particularly in food and beverage lanes.

The method shift is now part of the story

The most important change is not simply that theft is rising. It is that the method mix is changing.

The FBI cargo-theft overview and the IC3 alert both describe a threat environment in which physical theft and cyber-enabled deception increasingly overlap. The Transportation Intermediaries Association’s anti-fraud framework similarly warns that strategic theft now includes stolen identities, doctored bills of lading, unauthorized double-brokering, fictitious pickups, and last-minute destination changes made to appear legitimate.

That creates two different but related control problems:

Rail risk centers on corridor exposure and physical interception

Train theft tends to exploit route geography, dwell points, remote sections, and the difficulty of protecting long linear networks. Criminals may target specific commodities, monitor train movements, or exploit mechanical vulnerabilities and response times. The immediate consequence is not only stolen cargo but damaged equipment, delayed service, and heightened risk to crews and responders.

Truckload risk centers on identity, authority, and release control

Truckload theft increasingly happens before a trailer ever reaches the road in the intended chain of custody. The weak points are often digital or procedural: bad contact data, compromised email, a last-minute carrier substitution, over-shared pickup numbers, failure to verify the driver at the warehouse window, or a handoff to a driver dispatched under falsified authority.

What federal action could change

CORCA is not a cure-all, but the elements industry groups are backing match the problem’s current shape. As described by AAR and related advocacy materials, the legislation is meant to improve prosecution of organized theft networks, expand money-laundering and forfeiture tools, enable stronger case-building across repeated thefts, and establish a national coordination center within Homeland Security Investigations.

In practice, that could matter in three places. First, it could improve multi-jurisdiction case aggregation for crews operating across counties and states. Second, it could tighten coordination between rail police, local law enforcement, HSI, FBI, retailers, carriers, and insurers. Third, it could treat cargo theft more consistently as organized supply-chain crime rather than a series of isolated local property offenses.

What it probably does not change on its own is the day-to-day need for better execution controls at pickup, transfer, and delivery. Even if federal coordination improves, most theft opportunities still open when freight is released too easily, reassigned too casually, or parked too vulnerably.

What logistics teams should audit now

The near-term takeaway from October 29 is practical. Companies moving high-risk freight should be reviewing not only onboarding and insurance checks, but also the handoff controls that occur after a load is tendered.

Priority items include:

• driver-license and tractor information verification at pickup, not just MC/DOT verification during setup;
• call-back verification using known shipper, broker, or warehouse contacts before releasing freight on any exception or change request;
• two-factor pickup authentication for high-value or theft-prone loads, including secure pickup numbers and separate release confirmation;
• no acceptance of last-minute carrier substitutions without full re-vetting;
• tighter after-hours and weekend release rules;
• geofence and stop-alert escalation for first stops, cross-docks, and off-route dwell;
• stricter chain-of-custody procedures for firearms-related, electronics, food, metals, and other theft-prone commodities.

CAP Logistics readers should view the latest cargo-theft wave less as a standalone security issue than as a network-control problem. For industrial and project freight, the immediate risk is not only claims severity but disrupted production schedules, missed site deliveries, and avoidable downtime when pickup, handoff, and verification procedures are weaker than the threat environment now requires.