Royal Mail Hacked

Associate
Joined
4 Aug 2008
Posts
2,059
Royal Mail Group, the UK’s centuries-old postal institution, has allegedly suffered a massive data breach resulting in the leak of 144GB of internal files, CUSTOMER INFORMATION, and marketing data.

Hackers gained access to Royal Fail systems using the credentials of a Spectos employee compromised in a 2021 info stealer malware incident.

While the breach hasn’t been confirmed by Royal Mail, the company has acknowledged the issue through their vendor, Spectos.
If the data is genuine, it could have a wide impact. For customers, it means their details are now out there, which could lead to scams, spam, or even identity theft.

 
The threat actor behind this leak (who uses the "GHNA" handle on BreachForums) released 16,549 files allegedly containing Royal Mail customers' personally identifiable information (including names, addresses, planned delivery dates, and more
So if you are expecting a delivery in the next few days, somebody could use this leak to change your delivery ? Because you only need a tracking number and the post code to do this
 
2021...

So, leavers process and password rotation/expiration rules up to scratch then?

Jokes.

Probably mostly running on beige boxes running XP as well.
It's disgusting that these chumps hold all our data and can't follow basic security practices. Get exploited with a zero day...fine... but when it's something like this...
 
Probably mostly running on beige boxes running XP as well.
It's disgusting that these chumps hold all our data and can't follow basic security practices. Get exploited with a zero day...fine... but when it's something like this...

Whilst the punishment amounts to a slap on the wrist, and reputational damage is a bigger deterrent - nothing will change.

I note in the breach "courtesy of Spectos, again". So not the first time they've been rinsed. RM need to be cutting ties, stat.
 
Back
Top Bottom