Canada Post said on Wednesday that a cyberattack and data breach on an electronic data interchange (EDI) supplier has compromised information from 44 of its large parcel business customers, affecting nearly 1 million recipients.
The attack on Ontario-based Commport Communications compromised the shipping manifest data of the customers. Canada Post, Canada’s government-run postal carrier, did not identify the customers.
About 950,000 recipients were impacted by the breach, Canada Post said. The vast majority of the data, 97%, consisted of names and addresses, with 3% including email addresses or phone numbers.
Canada Post said Commport notified it of the breach a week ago on May 19. The postal carrier said it is investigating the attack.
Before the latest disclosure, Canada Post said the EDI provider had notified it of a “potential ransomware issue” in November. An investigation found “no evidence to suggest any customer data had been compromised at that time,” the postal carrier said.
Canada Post did not explicitly link that “potential ransomware issue” with the newly disclosed data breach. However, it is notoriously difficult to determine the extent of data breaches after ransomware attacks, particularly in cases where the hackers cover their tracks.
Canada Post uses Commport to manage shipping manifest data of its large parcel customers.
Another Canada-based EDI provider, Faxinating Solutions, was targeted in a ransomware attack earlier in the spring.
EDIs, in place since the 1960s, offer standardized communications platforms for business-to-business communication. They are used extensively in the transportation and logistics industry to communicate key shipping data.
Commport did not immediately respond to FreightWaves’ request for comment.
Click for more FreightWaves articles by Nate Tabak.
Related coverage
Brokerage Compliance Symposium
The day before F3. Every compliance issue you face - fraud exposure, carrier liability, FMCSA rules, cargo theft, insurance gaps - navigated by attorneys and operators defining best practices in a changing industry.
F3 Awards Dinner
The night before F3. FreightTech100 companies honored. FreightTech 25 and Shipper of Choice winners revealed live. Cocktail reception into dinner and live music - 300 industry leaders in one purpose-built room.
F3: Future of Freight Festival
Industry-defining keynotes, rapid-fire technology demos, and industry leaders networking in experiences across Chattanooga - plus the inaugural F3 Awards Dinner featuring the FreightTech and Shipper of Choice reveals.
The day before F3. Every compliance issue you face - fraud exposure, carrier liability, FMCSA rules, cargo theft, insurance gaps - navigated by attorneys and operators defining best practices in a changing industry.
The Signal at Chattanooga Choo Choo • Chattanooga, TN Register NowThe night before F3. FreightTech100 companies honored. FreightTech 25 and Shipper of Choice winners revealed live. Cocktail reception into dinner and live music - 300 industry leaders in one purpose-built room.
The Signal at Chattanooga Choo Choo • Chattanooga, TN Register NowIndustry-defining keynotes, rapid-fire technology demos, and industry leaders networking in experiences across Chattanooga - plus the inaugural F3 Awards Dinner featuring the FreightTech and Shipper of Choice reveals.
The Signal at Chattanooga Choo Choo • Chattanooga, TN Register Now