Breachroom by Templarbit
Parties InvolvedUS Postal Service,
Severity
Medium
Disclosed PubliclyNovember 20, 2018
Initial Discoveryn/a
Leaked Informationemail address, username, user ID, account number, street address, and phone number
Attack VectorData Breach
Tags
PII
November 22, 2018
The US Postal Service ignored for more than a year an authentication oversight that exposed the account details of 60 million users to anyone that logged into the web service.https://www.bleepingcomputer.com/news/security/us-postal-service-exposes-data-of-60-million-users-for-over-a-year/