Royal Mail data breach as customers’ information leaked to other users
by 0 
Royal Mail has experienced a data breach where customers have seen the information of others users.
A statement on Royal Mail’s Click and Drop status updates website said: “We have been made aware there was an issue affecting Click & Drop that meant some customers could see other customer’s orders.
“As a protective measure, we have stopped access to Click & Drop temporarily.”
The issue was first acknowledge by the company on Tuesday afternoon when it said it was investigating issues with accessing Click and Drop and orders not appearing for users.
Later that afternoon the issue was being treated as “the highest priority”, the Click and Drop status updates website said.
Complaints on Twitter in response to the status updates had been mounting through the afternoon.
Some users reported seeing details of people’s orders, business’s order history and their customers details.
“We fully understand and apologise for the inconvenience caused by this,” Click and Drop status updates website said.
“Our engineers are working as hard as possible to get the site back up and running as expected.”
The Click and Drop service is the Royal Mail’s parcel shipping service used by both businesses and regular consumers.
The service allows postage to be paid online and parcels to be collected or dropped to a specific location and shipped.
Royal Mail and the Information Commissioner’s Office have been contacted for comment.
On Monday last week, the company was spared two weeks of strike action by the Communications Workers Union (CWU) after the union withdrew planned walkouts due on 2, 3, 4, 8, 9 and 10 November.
Royal Mail’s parent company, International Distributions Services plc, just last month announced it would begin a process to make 5,000 to 6,000 roles redundant by August next year.
The announcement was blamed on industrial action taken by Royal Mail workers, delays in improving productivity and falling parcel volumes.
A process of “consulting on rightsizing” is to begin to reduce jobs by an estimated 5,000 full time roles by March 2023 and 10,000 by end of August 2023 to achieve short-term cost efficiencies, the parent company said.
