Data breach hits 44 big Canada Post shippers, exposing nearly 1M customers

Before the latest disclosure, Canada Post said the EDI provider had notified it of a “potential ransomware issue” in November. An investigation found “no evidence to suggest any customer data had been compromised at that time,” the postal carrier said. 

Canada Post did not explicitly link that “potential ransomware issue” with the newly disclosed data breach. However, it is notoriously difficult to determine the extent of data breaches after ransomware attacks, particularly in cases where the hackers cover their tracks. 

Canada Post uses Commport to manage shipping manifest data of its large parcel customers.  

Another Canada-based EDI provider, Faxinating Solutions, was targeted in a ransomware attack earlier in the spring.

EDIs, in place since the 1960s, offer standardized communications platforms for business-to-business communication. They are used extensively in the transportation and logistics industry to communicate key shipping data. 

Commport did not immediately respond to FreightWaves’ request for comment. 

Click for more FreightWaves articles by Nate Tabak.

Related coverage

• Ransomware attack on EDI provider highlights cyber risks in supply chain
• Colonial-level cyberattack on trucking likely – but preventable
• Trailer maker Utility targeted in ransomware attack