USPS Confirms Possible Security Breach


2014/11/10 Several news sources have reported on a security breach has been reported for the United States Postal Services.

WASHINGTON (Reuters) – The U.S. Postal Service reported a data breach on Monday that may have compromised personal information about its 500,000 employees as well as data on customers who contacted its call center from January through mid-August.

Per a communication to industry, USPS David Partenheimer Manager, Media Relations noted, “Postal Service transactional revenue systems in Post Offices as well as on where customers pay for services with credit and debit cards have not been affected by this incident.  There is no evidence that any customer credit card information from retail or online purchases such as Click-N-Ship, the Postal Store, PostalOne!, change of address or other services was compromised.”


USPS Industry Alert Communication:

USPS IT performed work this past weekend to upgrade system security, which resulted in some loss of system functionality. It is also in response to a cyber-intrusion into some of our information systems. You may see this in the news today.

The extent of the breach is somewhat limited. We have had some employee data compromised and some customer care data compromised. We are notifying our employees today and are providing resources for them.

The compromised call center data was submitted by customers who contacted the Postal Service customer care center with inquiries via telephone or email between January 1, 2014 and August 16, 2014. The compromised data consists of names, addresses, telephone numbers, email addresses and other information for customers who may have provided this information. At this time we do not believe that affected customers need to take any action as a result of this incident. It appears that no customer credit card or financial data was compromised.

We are investigating the intrusion and are working closely with all the agencies you would expect – the FBI, the Department of Justice, our own Inspector General and Postal Inspection Service, and the US Computer Emergency Readiness Team. Additionally, we have brought in outside experts who specialize in investigations and data systems to help us understand what happened and how to improve our security.

We have already implemented some important security measures over the weekend and we will continue to roll out other new security measures in the coming days and weeks.

As things currently stand, it is business as usual for nearly every aspect of our operations – Post Offices are functioning normally and mail and packages are being delivered as usual. We have posted Q&As and other information about this on

Please visit us on the USPS Industry Outreach website. Thank you for your support of the United States Postal Service.

–Consumer and Industry Affairs

To subscribe or unsubscribe to Industry Alerts, please hit reply and send us your request.