Post Office’s new shipping service back online after it was hacked by fraudsters
An online shopping and shipping service set up by the Bermuda Post Office is back in action after it was hacked in a ransomware incident.
The MyBermudaPost website, a joint venture with Florida-based shippers MyUS, was been down for a week after it was targeted by fraudsters.
But the service sent an e-mail to customers last Wednesday to announce that the site was up and running again.
An earlier e-mail to customers from MyBermudaPost – which operates through the Bermuda Post Office – said that packages had been delayed by the attack.
MyUS added that payment details had not been compromised and that police and computer experts had been called in.
The MyBermudaPost e-mail to customers said: “On March 10, our MyBermudaPost service provider, experienced a ransomware incident, which caused disruption to our website.
“Customers are experiencing delays in shipping due to the complications that this incident has caused for us.
“Your packages are safe and secure and remain our top priority. Additionally, you will not be charged storage fees during this time.
“Our IT team are working around the clock to get service back up and running quickly – but equally as important – securely.
“Thank you for your patience and understanding. We will be providing updates, as appropriate, as we work to restore our services.”
MyUS was targeted by hackers at the same time and sent out a similar e-mail to its customers.
The e-mail said: “Rest assured, personal payment card data is not stored on our systems.
“As soon as we learnt of the incident, we notified law enforcement, engaged experienced legal counsel and third-party cybersecurity experts to help us investigate the incident and remediate our systems.”
The service was set up by the Government last year in partnership with MyUS.
The joint venture was condemned by retailers after it was announced last year, who claimed it would deter the public from “buying Bermudian”.
And one island shipping company complained that the Government should have discussed the plan with private sector couriers before it sealed a deal with a foreign firm.
Ransomware is a type of malware that threatens to publish the victim's personal information or permanently block access to it unless cash is handed over.
The attacker may also threaten to leak sensitive information if a ransom is not paid and can crash critical systems.
The Royal Gazette has asked the Government several times for comment on the incident, but no response has been received.