USPS ‘Informed Delivery’ Is Stalker’s Dream
Summary: The U.S. Postal Service's Informed Delivery service, which emails residents scanned images of incoming mail, had roughly 6.3 million accounts as of October 2017 and validates new signups with four knowledge-based authentication questions supplied by Equifax. Krebs on Security reported that the weak questions, the absence of any postal notification when someone registers at an address, and the lack of a working opt-out leave the service open to misuse by stalkers, identity thieves, and private investigators.
Key Takeaway: Anyone who can answer four Equifax-sourced questions about a resident can see that resident's incoming mail, and the Postal Service's own help desk told one reader there is no way to make a home address ineligible for the service.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026