Supply chain ⛓ Supply Chain

Canada Post Third-Party Breach (May 2021)

📅 2021-05-01 🏢 CommPort Communications
Primary Source ↗

Incident Details

Canada Post hit by data breach after supplier ransomware attack. Canada Post has informed 44 of its large commercial customers that a ransomware attack on a third-party service provider exposed shipping information for their customers. ​Canada Post has informed 44 of its large commercial customers that a ransomware attack on a third-party service provider exposed shipping information for their customers. Canada Post is the primary postal operator in Canada, serving 16.5 million Canadian residential and business addresses. Third-party company: CommPort Communications.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
CommPort Communications
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2021-05-01 Breach occurred
  2. 2021-05-27 Publicly disclosed