Summary:
-
Unintentional Data Sharing: The U.S. Postal Service (USPS) was found sharing the postal addresses of its online customers with major tech companies like Meta, LinkedIn, and Snap through hidden data-collecting code on its website. This issue was reportedly unintentional, and USPS claimed to be βunawareβ of the data-sharing practice.
-
Extent of Data Shared: The shared data included postal addresses of logged-in USPS Informed Delivery customers, information about usersβ computers and browsers, and tracking numbers of parcels, including their real-world locations in the postal system. Informed Delivery had over 62 million users as of March 2024.
-
Remediation: Upon discovery, USPS stated it took immediate action to address the issue and stop the sharing of personal information with third-party tech companies. The specifics of the remediation steps were not disclosed.
!