From Storefront to Freight Yard: This Week Proved That Organized Theft Is a Network Problem Commander Michael Ware’s Weekly Supply Chain, Organized Retail Crime & Cargo Theft Blog

September 20, 2026

This week provided some of the clearest evidence yet that organized retail crime and cargo theft cannot be effectively addressed as isolated property crimes. Across the country, investigators encountered fraudulent carrier identities, fake commercial-driver credentials, interstate retail-theft enterprises, railroad burglaries and high-value cargo diversions.

At the same time, one national operation demonstrated what can happen when agencies and the private sector connect their intelligence: more than 1,900 apprehensions and arrests across 32 states.

For law enforcement, retailers, carriers, railroads and supply-chain security professionals, the message is increasingly clear: criminal networks operate across jurisdictions, industries and digital platforms. Our intelligence and enforcement networks must do the same.

National ORC Blitz Produces More Than 1,900 Apprehensions and Arrests

One of the most consequential developments this week was the release of results from the second National Organized Retail Crime Blitz.

According to reporting published September 17, the nine-day August operation involved 84 law-enforcement agencies across 32 states and 40 retail brands. It resulted in more than 1,900 apprehensions and arrests and more than $2 million in recovered or prevented retail losses. Investigators also generated seven fencing-related leads, recovered six stolen vehicles and seized eight weapons.

One case went far beyond merchandise: authorities reported identifying a trafficking victim who had allegedly been forced to steal. That investigation remains ongoing.

Those results demonstrate why coordinated operations matter.

The value of a national blitz is not simply the arrest total. When dozens of jurisdictions and retailers operate simultaneously, investigators have an opportunity to identify repeat offenders, vehicles, fencing operations, resale accounts, common destinations and relationships that may otherwise remain invisible.

This should become a model for how we approach organized theft: local enforcement supported by a national intelligence picture.

$586,000 Copper Recovery Shows the Speed Required Against Strategic Cargo Theft

This week’s reporting also highlighted a case with direct implications for freight-security operations.

On September 14, FreightWaves reported that a $586,000 copper shipment originating in Illinois and destined for South Carolina was allegedly obtained through suspected carrier impersonation and diverted to Kentucky.

The response became a multistate operation involving the Cook County Sheriff’s Police Department, CargoNet, Schneider National, Kentucky authorities, Ohio law enforcement and additional partners.

GPS information helped investigators locate all six pallets at a Kentucky warehouse. Investigators subsequently located the stolen transportation equipment in Ohio. Four people were taken into custody across the two states, according to the report. Investigators continue examining whether the people and carrier identities involved may be connected to a broader organized cargo-theft network.

The case demonstrates something I continually emphasize:

Speed is an investigative weapon.

Cargo can cross several jurisdictions in hours. Waiting until the following business day to begin sharing information can mean losing the shipment entirely.

When industry reports an incident immediately and provides actionable GPS, tractor, trailer, driver and shipment information, law enforcement has an opportunity to move at the same speed as the offenders.

Fake FedEx Drivers and a $680,000 Electronics Load

An even more concerning example emerged in Delaware.

Delaware State Police announced September 18 that investigators arrested a California man in connection with the theft of approximately $680,000 in electronics from a New Castle warehouse.

Subsequent reporting described two individuals allegedly arriving at the warehouse posing as FedEx drivers and using fraudulent commercial driver’s licenses, vehicle registration, a fictitious license plate and shipping documents to obtain the freight. One suspect was later arrested; the second remained unidentified in the initial reporting.

That methodology should concern every shipper and distribution center in America.

The offenders allegedly did not need to defeat a hardened perimeter.

They allegedly created the appearance of legitimacy.

Cargo security therefore cannot rely solely on whether the driver knows the load number, presents a CDL or arrives in equipment displaying the expected company branding.

Authentication must increasingly involve multiple independent signals.

Freight Visibility Needs More Than One Signal

Technology developments this week point toward one possible solution.

Reporting on September 10 described a new freight-visibility capability that combines electronic logging device data with mobile tracking. The objective is to reduce visibility gaps and provide additional verification when fraud or identity concerns arise.

Another development announced this week involves carrier verification and insurance specifically addressing strategic cargo theft, including certain fraud-based theft scenarios.

The larger principle matters more than any individual product:

Do not trust one signal when protecting high-value freight.

A carrier record can be compromised.

A telephone number can be spoofed.

An email account can be hijacked.

A CDL can be fraudulent.

A GPS device can be disabled.

Layering verification makes criminal impersonation substantially more difficult.

Rail Cargo Remains an Active Target

Rail security also returned to the headlines this week.

On September 19, FreightWaves reported a burglary involving a moving BNSF Railway train in Riverside, California. According to the initial report, the Los Angeles-to-Chicago train was carrying mixed freight when a container caught fire during the burglary.

The investigation was still developing when reported, so conclusions about the offenders or complete circumstances would be premature.

But the incident reinforces a broader national concern.

Freight moving by rail represents enormous concentrations of merchandise traveling predictable corridors. Criminal groups increasingly understand those routes, stopping points and vulnerabilities.

Railroads and law enforcement therefore need persistent intelligence exchange around repeat locations, vehicles observed near tracks, burglary methods, commodity targeting and resale destinations.

Georgia RICO Case Shows Why Investigators Must Follow the Enterprise

Organized retail crime provided another major example this week.

On September 18, Georgia authorities announced that 11 defendants had been indicted in an alleged organized retail-theft enterprise responsible for more than $200,000 in losses across four states.

Prosecutors allege the organization targeted 10 retailers, stealing products ranging from household goods and fragrances to jewelry and Rolex watches. Authorities further allege stolen merchandise was sold through Instagram.

Each defendant faces allegations under Georgia’s RICO statute; these are charges, not convictions, and the defendants are presumed innocent unless proven guilty.

The investigation reportedly involved the Georgia Attorney General’s Organized Retail Crime Unit, Savannah police, retailer asset-protection teams and more than two dozen local, state and federal agencies across Georgia, Florida, South Carolina and Virginia.

This is exactly why investigators must move beyond the individual theft.

Follow the offender. Follow the vehicle. Follow the merchandise. Follow the online account. Follow the money. Find the fence.

That is how a shoplifting case becomes an enterprise investigation.

The Fencing Operation Remains the Center of Gravity

Another recent Florida case illustrates that point.

Authorities announced arrests connected to an alleged organized operation involving more than 150 baby-formula thefts and approximately $1.1 million in merchandise. Investigators allege the operation purchased stolen formula from professional shoplifters and resold it for profit.

The commodity is almost secondary.

Fragrance, cosmetics, electronics, baby formula, apparel and building materials all share characteristics criminals value: demand, portability and resale potential.

If there is no profitable resale channel, large-scale organized theft becomes considerably harder to sustain.

That makes fencing investigations one of the most important tools available to ORC investigators.

Policy: CORCA Remains Before the Senate

The federal policy debate also continues.

The House previously passed the Combating Organized Retail Crime Act, and industry groups continue urging Senate action. The legislation is intended to strengthen federal coordination around organized retail and supply-chain crime.

There is also active debate over aspects of the legislation, including the structure and authorities of the proposed federal coordination framework. Those policy questions deserve careful consideration as the Senate process continues.

Whatever the final legislative outcome, the operational need is difficult to dispute:

America needs better mechanisms for connecting cross-jurisdictional retail and supply-chain crime intelligence.

What This Means for the Week Ahead

The cases from this week point toward several immediate operational priorities.

Treat identity verification as cargo security. Shippers should independently verify the driver, tractor, trailer, carrier and shipment—not simply the paperwork.

Create verification redundancy. High-value freight should rely on multiple independent data points rather than a single credential or communication channel.

Report cargo theft immediately. Minutes matter when GPS information and interstate partners can be activated before merchandise disappears into a warehouse or resale network.

Follow the resale infrastructure. Investigators should treat online marketplaces, social-media accounts, warehouses, fences and financial transactions as central parts of ORC investigations.

Connect ORC and cargo intelligence. Retail merchandise and stolen freight can ultimately move through the same criminal networks.

Strengthen rail partnerships. Railroad police, local agencies, cargo investigators and private security teams should exchange location and offender intelligence before the next incident.

Prepare for coordinated operations. The national ORC blitz demonstrated what simultaneous public-private action can accomplish. That same concept has enormous potential throughout the supply chain.

Closing: The Criminals Are Already Sharing Information

The most important lesson from this week is simple.

Criminal organizations do not care where one jurisdiction ends and another begins.

They do not separate cargo theft from fraud, retail theft from fencing, or physical crime from cyber-enabled identity theft.

They identify weaknesses and exploit them.

Our advantage comes from doing something they cannot easily defeat: connecting the people who possess different pieces of the intelligence picture.

That means retailers talking with investigators. Carriers talking with law enforcement. Railroads sharing intelligence with local agencies. Technology companies providing actionable information quickly. Prosecutors examining enterprise-level cases. And agencies sharing intelligence across state lines before stolen property disappears.

Technology matters.

Enforcement matters.

Prevention matters.

But collaboration turns all three into capability.

The future of organized-theft enforcement will belong to the networks capable of moving intelligence faster than criminals can move stolen merchandise.

Identify the network. Verify the identity. Follow the freight. Follow the merchandise. Follow the money. Find the fence. Share the intelligence. Disrupt the organization.

Commander Michael Ware

Organized Retail Crime | Cargo Theft | Supply Chain Security | Intelligence Sharing | Public-Private Partnerships

This week’s source reading: National ORC Blitz results — September 17⁠ · $586K copper recovery — September 14⁠ · Delaware State Police $680K cargo-theft case — September 18⁠ · Georgia multistate ORC indictment — September 18⁠ · Rail burglary report — September 19⁠