[News](/news) Canada Post Data Breach Likely Linked to Ransomware Attack in December 2020 [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Canada Post Data Breach Likely Linked to Ransomware Attack in December 2020 ##### [Edward Kost](/team/edward-kost) May 30, 2021 Canada Post has suffered a data breach impacting 44 of its business clients which lead to 950,000 receiving customers being compromised. 97% of the accessed data, spanning from July 2016 to March 2019, contained receiving customer names and address information. Forensic investigations did not find evidence of any financial data compromise. This breach occurred through [Commport Communications](https://www.upguard.com/security-report/commport-communications) - a third-party vendor hired by Canada Post to manage the shipping manifest data of its large business clients.  But this was not a sudden third-party breach. This event is believed to be linked to a ransomware attack Commport Communications suffered back in December 2020.  At the time, Commport Communications was confident that the ransomware attack, launched by Lorenz, did not impact Canada Post and advised the postal service that their data was safe. But behind the scenes, Lorenz was publishing 35.3 GB of the data allegedly stolen from the ransomware attack on the dark web. Data leaks are overlooked attack vectors, and many organizations are unknowingly depositing them.  A data leak is any accidental or unauthorized exposure of sensitive data. When cybercriminals discover data leaks, it could arm them for a devastating data breach. So by [shutting down third-party data leaks before they’re discovered](https://www.upguard.com/product/breach-risk/threat-monitoring), third-party breaches and supply chain attacks will be significantly reduced. The string of third-party breaches that have rocked the business world since the SolarWinds incident demonstrates that vendors can no longer be trusted - not for their cybersecurity efforts, nor their cyber incident communications. [Biden’s Executive Order](https://www.upguard.com/blog/cybersecurity-executive-order) aims to change this. The lack of data breach transparency could be due to either a conscious or subconscious bias. Vendors are partial to the preservation of their reputation, and so their statements cannot be the only source of information about a data breach they’ve suffered. A preserved reputation, at the expense of 6 months of sensitive data leakage, hardly seems like a fair exchange. ## How secure is Commport Communications? Commport Communications provides business-to-business supply chain solutions including Electronic Data Interchange (EDI), Global Data Synchronization Network (GDSN) datapool services, and Value Added Network (VAN) connectivity. The company offers software and cloud-based platforms for electronic commerce transactions, product information management, and data synchronization between trading partners across multiple industries. * View our free preliminary report on Commport Communications’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Commport Communications's score](/security-report/commport-communications) [View score](/security-report/commport-communications) [https://www.commport.com/](/security-report/commport-communications) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)