May 28, 2021

Canada’s main postal operator, Canada Post, recently announced that a third-party provider, Commport Communications, was the victim of a ransomware attack that allowed threat actors to access data stored in their systems.

The postal operator, which serves 16.5 million Canadian residential and business addresses, said the data retrieved included delivery data from major parcel service providers.

It also contains sender and recipient contact data, names, and postal addresses.

In total, 44 commercial customers of Canada Post and 950,000 receiving customers were affected, according to the data.

While Commport did not believe their data had been accessed, Canada Post disagrees stating that external cybersecurity experts were hired to help with the investigation.

For more information, read the original story in Bleeping Computer.