Advertisement

Canada Post resetting customer passwords over possibility personal info was compromised

Click to play video: 'Protecting small businesses from cyber-security threats'
Protecting small businesses from cyber-security threats
WATCH ABOVE: Protecting small businesses from cyber-security threats – Oct 1, 2019

OTTAWA — Canada Post says it is resetting passwords for all online customer accounts after a report that some personal information may have been compromised.

The postal service says that login names and passwords stolen in privacy breaches elsewhere may have been used to access Canada Post accounts if customers reused their login credentials on multiple sites.

It maintains that the form of access, known as credential stuffing, does not constitute a cyberattack or a breach of the Canada Post system.

Click to play video: 'Dessert stamps featuring Saskatoon berry pie ‘unique’: collector'
Dessert stamps featuring Saskatoon berry pie ‘unique’: collector

Canada Post says the data may have been compromised in 2017, but would not say what kind of personal information could have been taken. It also would not say how many accounts may have been fraudulently accessed.

Story continues below advertisement

The postal service says it has hired a third party to further investigate the issue, and it is also reviewing its policies and procedures on how it can strengthen the security of its online platforms.

In a separate incident, Canada Post said last November that someone had used its delivery tracking tool to gain access to personal information of 4,500 customers of the Ontario Cannabis Store but declined to identify the information.

Sponsored content

AdChoices