Postal Bulletin focuses on social engineering risks
Social engineering schemes target Postal Service employees and contractors with deceptive tactics that convince individuals to reveal sensitive information or compromise systems.
sensitive information
USPS: Here’s how to avoid falling for vishing scams
June 12, 2024 The Postal Inspection Service is warning USPS employees and the public of a new identity fraud scheme called vishing — short for voice phishing — where scammers try to hook you as soon as you answer the phone. The scammers will call from a number that may look familiar or even appear … Read more
USPS OIG Management Alert – NSA Price Tables Sent Unsecured to Vendors
Introduction During the audit of Negotiated Service Agreement – Contract [redacted], we identified an issue related to the transmission of Negotiated Service Agreement (NSA) pricing rate tables. Specifically, the Postal Service electronically transmitted confidential contract pricing rates to PC Postage vendors in unencrypted emails. NSAs are contractual agreements between the Postal Service and commercial mailers, … Read more
USPS OIG: Management mishandled Personally Identifiable Information for Veterans
Introduction During the Peak Season Hiring audit (Project Number 20-316), we found that the U.S. Postal Service mishandled personally identifiable information (PII) for veteran employees on an internal system. The purpose of this management alert is to bring these issues to management’s attention and make recommendations for corrective action. PII is any information about an … Read more
USPS urges increased cybersecurity vigilance amid Mideast tensions
USPS is requiring employees, contractors and others to demonstrate increased cybersecurity vigilance amid escalating tensions in the Middle East. Email spearphishing campaigns targeting U.S. government agencies are intensifying, the Postal Service Corporate Information Security Office reports. Cyberthreat actors are aggressively attempting to steal sensitive information, including account credentials and financial information, using targeted information campaigns. … Read more
Postal Bulletin highlights protecting USPS Networks from personal devices
When plugging a smart mobile device (e.g., phone, tablet, or wearable technology) into a computer’s USB port, the two devices can exchange information or malware. At the U.S. Postal Service®, this could put sensitive information into the wrong hands and potentially affect our business and reputation. To prevent a security breach, follow these important charging … Read more
Mysterious spy cameras collecting data at post offices
By Chris Halsne – March 11, 2015 DENVER — Within an hour of FOX31 Denver discovering a hidden camera, which was positioned to capture and record the license plates and facial features of customers leaving a Golden Post Office, the device was ripped from the ground and disappeared. FOX31 Denver investigative reporter Chris Halsne confirmed … Read more