Supply chain
⛓ Supply Chain
Canada Post Third-Party Breach (May 2021)
Primary Source ↗Incident Details
Canada Post hit by data breach after supplier ransomware attack. Canada Post has informed 44 of its large commercial customers that a ransomware attack on a third-party service provider exposed shipping information for their customers. Canada Post has informed 44 of its large commercial customers that a ransomware attack on a third-party service provider exposed shipping information for their customers. Canada Post is the primary postal operator in Canada, serving 16.5 million Canadian residential and business addresses. Third-party company: CommPort Communications.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- CommPort Communications
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2021-05-01 Breach occurred
- 2021-05-27 Publicly disclosed