Personal info of 800,000 USPS employees compromised in breach

November 11, 2014 – 7:15 AM

The US Postal Service has joined the ranks of private sector companies and governmental agencies that have been breached and had data stolen by hackers.

According to a statement released by the service on Monday, the attackers managed to find a way into some of their information systems, and have likely compromised personal information of some 800,000 current and past employees, as well as some data for customers who contacted the Postal Service Customer Care Center with an inquiry via telephone or e-mail between Jan. 1, 2014, and Aug. 16, 2014.

The latter need not take any action as a result of this incident, the USPS noted, but the former will be provided credit monitoring services for free for a year, and will be helped by the USPS’ Human Resources Shared Services Center, as their compromised information includes their name, date of birth, Social Security number, address and other information including beginning and end dates of employment, and emergency contact information.

“Postal Service transactional revenue systems in Post Offices as well as on usps.com where customers pay for services with credit and debit cards have not been affected by this incident,” they noted. “There is no evidence that any customer credit card information from retail or online purchases such as Click-N-Ship, the Postal Store, PostalOne!, change of address or other services was compromised.”

In the statement, the USPS doesn’t say when the intrusion was first discovered, but some officials have shared with The Washington Post that it was in mid-September.

Source:
http://www.net-security.org/secworld.php?id=17621

You must be logged in to post a comment.