2025 Spectos vendor breach — 144GB customer data
Data compromised
Names, addresses, package details, delivery dates, internal recordings
Technical writeup
Royal Mail's third-party supplier Spectos suffered a breach. Over 144GB of customer data exposed and posted on BreachForums. Compromised credentials from 2021 infostealer malware. Data included full names, addresses, package details, delivery dates. Also internal Zoom recordings, Mailchimp campaigns, postal network info. 293 folders, 16,549 files.
Root cause
Third-party vendor compromise; infostealer credentials