Canada Post website data breach

[lotzofuniquegoodies]

An FYI for anyone who uses Canadapost on a regular basis or has not received an email regarding this recent concern. There is a link at the website if you would like to manually update your password.

Canada Post is resetting passwords for online accounts

Canada Post is resetting passwords for all online customer accounts, starting on October 16, 2019. Customers with online accounts will receive an automated email from Canada Post that includes the steps to reset their password.

There has not been a cyberattack or hack of the Canada Post network but we are investigating a report that some customer information may have been compromised in 2017.

The cause appears to be that login and password credentials stolen in external privacy breaches unrelated to Canada Post were used to access individual Canada Post accounts. This is possible when users reuse their credentials on several websites to avoid having to remember different passwords.

Canada Post is contacting any customer directly if their information has been compromised by this activity.

While this is not a breach of the Canada Post system, we understand our obligation to our customers and all Canadians to keep their information safe. We are reviewing our policies and procedures to determine what can be done to strengthen the security of our online platforms.

https://www.ctvnews.ca/canada/canada-post-investigating-whether-some-customer-data-was-compromised-i...

-Lotz

[ypdc_dennis]

That is not a Canada Post website data breach.

The problem is with people using the same password on multiple sites -- get compromised on one and the problem can easily spread.  Especially if you never update your passwords.

I am guilty of using the same password on a number of sites -- but I do that for sites where I don't care if the info is hacked.  If it involves money, I try to have a unique password that is easy for me to remember and difficult for anyone else to guess.  I also never allow PayPal to load up without me supplying a password.

-..-

-..-

[hlmacdon]

They've probably been hit with a spate of chargebacks for billed shipping costs and decided to go and cross reference their customer database against other breach lists of compromised emails. They aren't cross referencing passwords as my account there has a very secure unique password that has never been used elsewhere. As always it would be wise to be using a password manager for unique passwords for any site you use.

[kawartha-ephemera]

---

@ypdc_dennis wrote:

That is not a Canada Post website data breach.

The problem is with people using the same password on multiple sites -- get compromised on one and the problem can easily spread.  Especially if you never update your passwords.

I am guilty of using the same password on a number of sites -- but I do that for sites where I don't care if the info is hacked.  If it involves money, I try to have a unique password that is easy for me to remember and difficult for anyone else to guess.  I also never allow PayPal to load up without me supplying a password.

-..-

-..-

---

My favourite throw-away password is trythis1 ... can always manage to remember that one. No, that is not my ebay password!

Always use a password app to create and remember those ... not too concerned about this CP situation.

[kawartha-ephemera]

---

@hlmacdon wrote:

They've probably been hit with a spate of chargebacks for billed shipping costs and decided to go and cross reference their customer database against other breach lists of compromised emails. They aren't cross referencing passwords as my account there has a very secure unique password that has never been used elsewhere. As always it would be wise to be using a password manager for unique passwords for any site you use.

---

Yup, a good password manager such as Blackberry's Password Keeper really amps up my password game ... remembers them for me too.

[unique-attic-treasures]

After our Shippo Account was hacked(through no fault of our own..they where hacked but they have never admitted it) about a year and a half ago we started using ESET smart security on our home network...if covers everything(passwords and video camera's etc)..very reasonable pricing for what you get and how many computers it will cover

It was recommended to us by my father n' law who owns his own customer software company(he has contracts with many business' and municipality's)

I highly recommend this program to everyone

They do have free trials too if your interested