California Cargo Theft Hotspots: Corridors, Counties, and Cargo Types at Risk

TL;DR: California logged 1,218 cargo theft incidents in 2025, contributing to a national total near $725 million. The Inland Empire, Port of Los Angeles/Long Beach drayage lanes, and the I-5, I-10, I-15, and I-80 corridors record the highest incident density in the state. Across California's freight network, carrier milestone tracking leaves critical visibility gaps at every handoff, and those gaps are exactly where theft rings operate. Deploy real-time multi-sensor trackers on high-value lanes to detect route deviations, door openings, and tamper events during transit, shifting security from reactive claims filing to in-transit intervention before a load is lost.

California recorded 1,218 cargo theft incidents in 2025, more than any other state in the country, while organized criminal groups drove estimated national losses to nearly $725 million, a 60% increase from 2024, per Verisk CargoNet's annual analysis. The average value per theft rose 36% to $273,990, reflecting a structural shift toward more selective, high-value targeting rather than opportunistic volume. Most supply chain teams still rely on carrier milestone updates that only confirm a loss after the trailer is empty. When a high-value shipment exits the Port of Los Angeles and transitions to a drayage driver, carrier portal data goes silent. That silence is what organized theft networks are counting on.

Drivers of California Freight Theft Exposure

California moves approximately $2.8 trillion in goods annually across its ports, highways, rail networks, and distribution facilities, per the California Governor's Office of Business and Economic Development. The San Pedro Bay Port Complex alone handles 31% of the nation's container volume, and California's ports collectively process 40% of all containerized cargo entering the U.S. The state also holds the largest warehouse footprint in the nation at 1.17 billion square feet, with the Inland Empire accounting for over 562 million square feet of that total. That combination of port concentration, highway density, and warehouse scale puts high-value freight within a predictable geographic pattern, and criminal networks are organized around exactly that predictability.

Financial losses are accelerating. U.S. cargo theft surged to nearly $725 million in 2025, a 60% increase from 2024. For on time and in full (OTIF) performance, each incident carries a compound cost: direct inventory loss, expedite or reorder costs, carrier dispute time, and downstream customer relationship damage. The threat has also structurally shifted. Fictitious pickup fraud has grown sharply, with criminal networks now using digital identity theft to impersonate carriers before a single box moves, and understanding cargo security program gaps means separating three failure modes: carrier handoff blind spots, extended dwell time in unsecured yards, and identity-based fraud that redirects loads before in-transit detection can flag a deviation.

All three operate across California's corridors simultaneously.

Annual Cargo Theft Incident Trends

Confirmed cargo theft incidents rose 18% year-over-year in 2025, from 2,243 to 2,646 events, per Verisk CargoNet's 2025 annual analysis. That growth outpaced total incident volume, which held essentially flat at 3,594 events, signaling that criminal activity is becoming more targeted rather than merely more frequent, with organized groups selecting higher-value loads and executing more precisely.

Kern County rose 82% and San Joaquin County rose 44% in 2025, a pattern consistent with enforcement pressure displacing activity from the LA basin rather than suppressing it, per 2025 incident data. In Q1 2026, Verisk CargoNet recorded 767 supply chain crime events across the U.S. and Canada, a 5.3% decrease from Q1 2025, with $131.58 million in estimated losses. California was one of only two of the eight most-affected states to see incidents rise in Q1 2026, up from 255 to 277, while most others declined, confirming the state as a primary operating environment for organized crime networks per Verisk CargoNet. By Q2 2026, incident volume fell further to 677 events, down 26% from Q2 2025, yet estimated losses more than doubled year over year to $304.6 million, per Verisk CargoNet's Q2 2026 analysis. The average value per theft with a reported commodity value reached $564,009, driven by a small number of extreme, multimillion-dollar losses in metals and enterprise technology.

California Freight Theft Risk Zones

Three primary zones concentrate California's exposure:

• Port and drayage transition zones: Among the highest-risk windows in the network, with fictitious pickup fraud and carrier impersonation most active in the Los Angeles area immediately after a container clears the gate.
• Distribution center staging yards: The Inland Empire's dense warehouse grid in Riverside and San Bernardino counties creates constant handoff points where cargo sits unattended for hours to days in unsecured staging areas.
• Long-haul corridor truck stops: Trailers sitting unattended at unsecured rest areas along I-5, I-10, and I-15 create extended dwell-time windows.

Organized theft crews research loads in advance and target these stops with specific timing, exploiting the gap between drop and pickup. When containers move between carriers and facilities, they disappear from the shipper's digital view, a gap that applies equally to ocean-to-drayage and drayage-to-over-the-road transitions. Carrier milestone tracking generates no signal between these zones.

Mapping California Freight Theft Corridors

California's primary interstate corridors each carry distinct theft profiles shaped by cargo types, geographic bottlenecks, and the density of unsecured parking along each lane.

California's Primary Theft Corridors: Risk Profiles by Route

The I-10 corridor connects the Port of Los Angeles and Long Beach eastward through the Inland Empire toward Arizona. California was one of only two of the eight most-affected states to see incidents rise in Q1 2026, per Verisk CargoNet, with Southern California and the Inland Empire forming the geographic center of that in-state concentration, and I-10 running directly through that core. An intermodal shipment moving from port to an Inland Empire distribution center passes through a sequence of carrier transitions (drayage at origin, onward movement, and drayage at destination), and each handoff creates a window where carrier portal data goes silent.

The I-5 corridor runs the full north-south spine of California, serving as the state's primary north-south freight artery. Per Verisk CargoNet's 2025 annual analysis, Los Angeles County recorded an 11% decline in incidents while Kern County rose 82% and San Joaquin County rose 44%, a pattern consistent with enforcement pressure displacing activity northward along I-5 and Highway 99 rather than reducing criminal capacity. Southern California corridors including I-5 and I-10 are established freight theft hotspots, a characterization supported by industry analysis of regional theft concentration. Drop yards across Kern and San Joaquin counties that rated as low-risk in prior years now sit within the fastest-rising theft counties in the state.

On I-80, Sierra Nevada winter events including chain controls, spinouts, and multi-truck pileups force extended unplanned stops that leave freight stationary at unscheduled locations for unpredictable durations outside of planned carrier reporting windows. The Port of Oakland is the only major container terminal in the Bay Area, handling 2.3 million twenty-foot equivalent units (TEUs) of container cargo in 2025, and I-80 serves as the primary corridor connecting that concentrated port volume to inland distribution points. The combination of a single-facility port concentration and documented Sierra Nevada weather disruptions that force unplanned stops creates structural exposure for freight moving through the corridor. The I-15 corridor links Southern California to Las Vegas through remote desert terrain, passing through communities including Barstow and Needles where limited enforcement presence and the difficulty of identifying commercial offenses in remote areas create structural exposure for freight moving through the corridor.

Quantifying Cargo Theft by California County

Freight Theft Trends: Los Angeles

Los Angeles County remains a top national hotspot despite a reported 11% decline in incident volume in 2025, a drop that reflects enforcement displacement rather than reduced criminal capacity. An October 2025 joint LASD and LAPD raid on a single warehouse enterprise in the Commerce and surrounding Inland Empire area recovered $7 million in stolen freight and $1 million in cash, according to the LAPD. In 2026 alone, LASD's combined task force units recovered more than $28 million in stolen cargo freight across 36 search warrant executions throughout Southern California, per the Major Crimes Bureau, confirming that Commerce and the surrounding Inland Empire have become major regional hubs for organized cargo diversion with established warehouse distribution infrastructure. The transition from ocean carrier to drayage driver at the port gate happens within a documented manifest, but subsequent movement to a staging yard involves handoffs that carrier portals do not capture.

Freight Theft Exposure in Inland Empire

Riverside and San Bernardino counties form the operational core of California's cargo theft problem. The density of distribution centers across Fontana, Ontario, Rialto, and Perris gives organized theft rings both the freight volume and the surveillance complexity they need to operate sustainably. The October 2025 joint LASD and LAPD warehouse raid on a single enterprise in Commerce recovered $7 million in stolen freight and $1 million in cash, according to the LAPD. A separate January 2026 multi-agency sweep across Los Angeles, San Bernardino, and Riverside counties followed, with LASD's combined task force units recovering more than $28 million across 36 search warrant executions throughout Southern California in 2026 alone, per the Major Crimes Bureau. Enforcement pressure applied in one submarket pushes activity to an adjacent warehouse district, which means lane-level security cannot rely on regional enforcement as a mitigation variable.

Cargo Security Risks in Alameda County

Alameda County's risk profile centers on the Port of Oakland, the only major container terminal in the Bay Area. The Port of Oakland handled 2.3 million TEUs of container cargo in 2025, making it the single facility through which the Bay Area's entire containerized import and export volume flows. That concentration means every container entering or leaving Northern California by sea passes through a single port gate and a single drayage zone. The structural exposure mirrors the Los Angeles port complex: the transition from ocean carrier to ground transport creates a window where cargo is documented but not continuously monitored, and a single-facility concentration amplifies the consequence of any visibility gap at that transition point.

Orange County Cargo Exposure and Mixed Cargo Risk

Orange County sits between the Los Angeles port complex and Southern California's southbound I-5 lanes, placing it on active transit routes for electronics, consumer goods, and pharmaceutical cargo moving between port origin and inland distribution points. Where pharmaceutical cargo moves through the corridor, theft exposure intersects with cold chain compliance requirements: a temperature excursion during an unmonitored dwell event and a theft event can both emerge from the same gap in continuous monitoring, and a single excursion can trigger recall processes and regulatory review independent of any theft event.

Mitigating Inland Empire Cargo Theft Risks

The Inland Empire is among California's most concentrated risk environments because the factors driving theft are structural rather than correctable through carrier vetting or routing alone.

Warehouse, Yard, and Dwell-Time Security Weaknesses

Common vulnerabilities across Inland Empire distribution infrastructure include poor perimeter lighting at staging yards, unmonitored drop areas where trailers sit unattended between carrier handoffs, and access control systems that cannot distinguish between legitimate and fraudulent carrier credentials at gate entry. Security analysts note that criminal enterprises tend to return to sites they have successfully targeted, and logistics sites hit once carry elevated repeat-offense risk unless visible security changes are made.

Dwell time is the primary operational variable that correlates with theft risk across every California corridor. For organized theft networks that have researched a load in advance, a multi-hour window of unmonitored dwell time is sufficient to execute a pilferage event and move compromised cargo before the loss is detected. The weekend effect amplifies this significantly: cargo sitting in unsecured yards over extended low-staffing periods gives theft crews the unmonitored time they need to execute and move compromised cargo before the loss is detected. Tive's analysis of cargo security program gaps documents how reduced oversight windows consistently correlate with elevated theft exposure. Without a device physically moving with the cargo, no yard security system generates an alert when a load transitions between an authorized and an unauthorized party inside a facility perimeter.

Drayage Vulnerabilities at Port of Los Angeles/Long Beach

The first miles after a container clears the Port of Los Angeles/Long Beach gate carry the highest per-mile theft risk in the California network. Drayage moves freight in short runs with frequent driver changes, unattended trailer drops, and staging areas with open access. Criminal networks exploit that complexity through fictitious pickups and carrier impersonation, using forged credentials to redirect loads before they reach their intended destination.

Reducing First and Last Mile Theft

Closing the first-mile visibility gap requires a device that travels with the cargo rather than with the carrier's reporting system. Tive's global cellular, WiFi, and Global Positioning System (GPS) trackers, including the Tive Solo 5G, Tive Solo Pro, and Tive Solo Lite, provide multi-sensor coverage across different shipment profiles. The Solo 5G and Solo Pro both measure temperature, humidity, light, shock, and motion, detecting a door opening the moment it occurs because even ambient light triggers the sensor. The Solo Lite covers temperature, light, and motion for cost-sensitive lanes while maintaining the same long battery life and bi-directional connectivity that allow setting adjustments during transit.

As one logistics team noted after deploying Tive on their container lanes:

"TIVE device can support customer to track real time of their container and get light alert immediately when container door is opened during the transportation time, which can help customer avoid the risk of cargoes stolen." - Hoa H. on G2

For Solo 5G deployments, the Tive Seal adds a layer of physical security. An International Organization for Standardization (ISO) 17712 High-Security and Customs-Trade Partnership Against Terrorism (C-TPAT) certified cable lock built with TydenBrooks, the Seal pairs specifically with the Solo 5G and alerts on cable cut, device damage, and forced entry, giving shippers physical and digital detection operating together on the same shipment. Venture Metals+ applied Smart Route Deviation Alerts and light alerts across its recycled metals shipments and avoided over $1 million in losses in the first half of 2026, including the March 2026 recovery of a $250,000 recycled copper shipment. In the drayage context, the same detection logic applies: a door opening at an unauthorized location, or a route deviating immediately after port exit, generates an alert while the shipment is still recoverable.

Common Container Theft Methods

Three theft methods dominate the California drayage environment:

1. Fictitious pickups: Criminals use cloned carrier identities to take possession of loads at the port gate. Nationally, fictitious pickup events climbed from an average of 66 per year between 2012 and 2022 to 576 events in 2023, with California recording the highest concentration of these incidents. By Q1 2026, Verisk CargoNet identified credential harvesting and outright acquisition of legitimate motor carriers as the two primary methods criminal networks use to execute impersonation-based theft. Credential harvesting uses phishing campaigns and remote access tools to compromise business email accounts and carrier identity systems, allowing criminals to accept tenders and redirect loads under a trusted, verified identity. Carrier acquisition involves purchasing operating motor carrier authorities through peer-to-peer marketplaces and brokerage services, with California flagged as one of the primary operating environments for these organized networks.
2. Straight theft: Physical interception of an unattended trailer at a staging area or truck stop, most common when cargo sits unmonitored at unsecured locations for extended periods.
3. Pilferage: Removal of one or two pallets from a high-volume shipment during a legitimate-appearing stop. Pilferage rarely triggers immediate red flags because the load appears largely intact at first inspection.

Critical Gaps in Intermodal Transit

The handoff points between ocean carriers, drayage drivers, and rail yards represent the deepest visibility gaps in the California freight network. When a container transitions from vessel to ground transport and waits for onward movement, it disappears from the shipper's digital view. Carrier-reported milestones during these transitions are inconsistent, delayed, and subject to manual data entry errors. Multi-network trackers transmitting on preconfigured transmission schedules, independent of any carrier's reporting system, continue generating location and condition data through every handoff.

Top Freight Categories Targeted by Thieves

Not all California cargo carries equal risk. Theft networks operating across these corridors target specific categories based on resale value, ease of diversion, and the difficulty of tracing individual units.

Within the electronics category, the composition shifted materially in 2025: theft of consumer-grade electronics such as televisions and personal computers declined, while organized criminal groups increasingly targeted enterprise computer components and cryptocurrency mining hardware, per Verisk CargoNet's 2025 annual analysis. No verified corridor-level breakdown identifies I-10 as the primary route for electronics theft. Food and beverage theft recorded 708 confirmed incidents in 2025, a 47% increase from 2024, with meat and seafood most heavily targeted in the Northeast and tree nut thefts more common on the West Coast, per the same CargoNet analysis.

Metal theft rose 77% year-over-year nationally, driven by copper demand, per Verisk CargoNet's 2025 annual analysis. In Q2 2026, metal theft rose to 80 incidents, up from 54 in Q2 2025, with copper remaining the most frequently targeted metal and aluminum, nickel, and tungsten also increasing. Enterprise-grade computer and networking equipment and cryptocurrency mining hardware continued as priority targets for organized groups in Q2 2026, moving through supply chains as conventional dry freight despite carrying values of several million dollars per shipment. The Venture Metals+ case and the Potomac Metals recovery of a $175,000 copper shipment tracked 400 miles off course illustrate how metals loads are targeted across multiple geographies rather than on a single predictable corridor.

For pharmaceutical cargo, theft exposure intersects directly with cold chain compliance requirements. A stolen pharmaceutical shipment represents both an inventory loss and a chain-of-custody documentation failure that can trigger regulatory review. The Solo Pro and Solo 5G both carry full sensor suites with Good Practice (GxP) validation covering U.S. Food and Drug Administration (FDA) 21 Code of Federal Regulations (CFR) Part 11 and European Union (EU) Annex 11, and a 3-Point National Institute of Standards and Technology (NIST) traceable Certificate of Calibration is included with every tracker. Buyers should confirm how these certifications apply to their specific validation program directly with Tive.

"You have full GPS/ Temperature/ Humidity visibility... the battery last for quite a long time (great for long haul shipments)." - Bill M. on G2

Battery life matters on California's longer corridors. A tracker that runs out of power before a shipment completes a multi-day I-5 or I-80 journey creates the same visibility gap as no tracker at all. Supply chain directors should also account for the shipment delay management risks that accompany theft exposure: a shipment diverted through a fictitious pickup is also a missed OTIF event, and the commercial consequences compound when the affected customer carries contractual on-time delivery requirements.

Talk to Tive's team about monitoring your highest-risk shipment lanes, or estimate the value of real-time visibility on your lanes with the Tive ROI Calculator.

FAQs

What is the Most Dangerous Corridor for Cargo Theft in California?

The I-10 corridor connects the Port of Los Angeles/Long Beach to the Inland Empire, running through Southern California, the country's largest freight corridor by containerized import volume, handling around 31% of all containerized imports entering the U.S. California was one of only two of the eight most-affected states to see incidents rise in Q1 2026, up from 255 to 277, while most others declined, per Verisk CargoNet, with Southern California and the Inland Empire driving the bulk of that in-state concentration. The I-5 Central Valley corridor is rising rapidly, with Kern County up 82% and San Joaquin County up 44% in 2025.

What is a Fictitious Pickup and How Common is it at Port of LA/Long Beach?

A fictitious pickup occurs when criminals use forged carrier credentials to take possession of a load at the origin point and redirect it before the shipper detects a deviation. Fictitious pickup events nationally climbed from an average of 66 per year between 2012 and 2022 to 576 events in 2023, with California recording the highest concentration in the country.

How Does Real-Time Tracking Differ from Carrier Milestone Tracking for Theft Detection?

Carrier portals generate milestone scans at departure and arrival but produce no signal during transit, meaning a theft event between scans registers as silence rather than an alert. Real-time multi-network trackers transmit on preconfigured transmission schedules independent of any carrier system, so a door opening, a route deviation, or a tamper event triggers an alert during the shipment rather than appearing in a post-delivery exception report.

What Cargo Types Face the Highest Theft Risk in California?

By growth rate and targeting pattern, food and beverage recorded the largest volume increase at 47% year-over-year, representing 708 incidents in 2025, and metals rose 77% year-over-year driven by copper demand, per Verisk CargoNet's 2025 annual analysis. Within electronics, organized criminal groups shifted focus toward enterprise computer components and cryptocurrency mining hardware while consumer-grade electronics such as televisions and personal computers declined. These figures represent documented incident trends, not a standardized risk tier threshold. The category ranking shifts depending on whether the measure is incident share or rate of increase. Pharmaceuticals and high-value retail goods also carry elevated exposure statewide, with theft risk concentrated wherever high-value loads are predictably routed through documented handoff points.

How Do the Tive Solo 5G and Tive Seal Work Together on High-Risk California Lanes?

The Solo 5G is a multi-network tracker measuring location, temperature, humidity, light, shock, and motion, with bi-directional connectivity that allows setting adjustments while the shipment is in transit. The Seal pairs with the Solo 5G as a physical high-security cable lock that alerts on cable cut, damage, forced entry, and separation from its paired tracker, feeding a timestamped audit trail to the Tive cloud for insurance claims and dispute resolution. Both devices together provide physical and digital security coverage at the container door.

Key Terms Glossary

Drayage: Short-haul trucking that moves freight between ports, rail yards, and nearby distribution facilities, representing the highest per-mile theft risk in the California network.

Fictitious pickup: A theft method in which criminals use forged or stolen carrier credentials to take possession of a load at the origin point, redirecting it before the shipper detects a route deviation.

OTIF: The key performance indicator (KPI) measuring whether shipments arrive at the correct destination, at the correct time, with the correct inventory quantity. It is the KPI most directly impacted by cargo theft incidents on California lanes.

Pilferage: Partial theft of a shipment, typically one or two pallets or individual units from a high-volume load, executed during a legitimate-appearing transit stop and often not detected until the receiving facility performs a count.

Straight theft: The complete theft of an entire trailer or container, typically occurring when the load sits unattended at a truck stop, staging yard, or rest area for an extended period.

Smart Route Deviation Alerts: A Tive cloud platform feature that flags when a shipment departs from its expected route during transit, generating an alert while intervention is still possible.