60 million people may have had their data exposed by the U.S. Postal Service

  | 
Team Clark is adamant that we will never write content influenced by or paid for by an advertiser. To support our work, we do make money from some links to companies and deals on our site. Learn more about our guarantee here.

The United States Postal Service confirms a long-lived security flaw on its website potentially exposed the data of 60 million users over the course of 2017 and 2018.

RELATED: HealthCare.gov data breach reveals info on 75,000 people

USPS web breach is now closed

Krebs on Security reports the Postal Service has now closed a loophole on its site that allowed anyone with an online account at USPS.com to view account details for approximately 60 million other users.

Among the data that may have been exposed to anyone who logged in and did a simple search was:

  • email address
  • username
  • user ID
  • account number
  • street address
  • phone number
  • authorized users

But note this well: While all that data and more was available, the USPS says it has no reason to believe any of it was in fact accessed by hackers.

The security flaw was discovered by a researcher who contacted USPS to report the exploit back in 2017.

Unfortunately, no action was taken to shore up the system at that time. It took the efforts of Krebs on Security to get the loophole closed earlier this month.

The exact point of weakness in the USPS.com system has been tied to a free program called Informed Visibility, which offers mail tracking and reporting in “near real-time.”

Informed Visibility, meanwhile, is a companion service to Informed Delivery — another free USPS program designed to offer a digital preview of incoming mail.

You can see our recent article for more about the opportunities and dangers around Informed Delivery, as well as similar tracking programs from FedEx, UPS and DHL.

Take steps to protect yourself now

If you want to shut potential identity thieves down before they wreak havoc in your life, a full-blown credit freeze is what you really need.

A credit freeze effectively shuts down a criminal’s ability to open new credit in your name even if they get your personal info in a breach.

Furthermore, if identity theft is a concern, be proactive and sign up for Credit Karma’s credit monitoring service, and a similar service from Credit Sesame. They’re both free!

More privacy & identity theft stories on Clark.com:

This post was last modified on November 27, 2018 9:50 am

Recent Posts

Chase Increases Sign-up Bonus for Popular Credit Cards for Limited Time

If you've been considering signing up for one of the Chase Sapphire credit cards, now…

6 hours ago

6 Home Expenses You Have To Budget For (Beyond Your Mortgage)

The costs associated with owning a home go way beyond the amount on the mortgage. …

7 hours ago

Should I Pay Off My Mortgage Before Retirement or Invest?

Inflation hits people on a fixed income the hardest. Say you're retired. You're living off…

8 hours ago

Should I Fire My 1% Financial Advisor To Save on Fees?

Deciding to save and invest are great habits. But once you check that box, your…

1 day ago

Fubo Drops Popular Channels Amid Dispute with Warner Bros. Discovery

If you're considering subscribing to Fubo, you need to be comfortable missing out on some…

2 days ago

5 Things To Know About the Wells Fargo Signify Business Cash Card

Are you looking for a way to earn 2% back on every purchase you make…

2 days ago