Canadian customers of United Parcel Service (UPS) have been receiving fraudulent text messages asking for payment for a delivery fee. Some of these messages reportedly include personal information such as customers’ phone numbers, postal codes, and order details. UPS has sent out a letter stating that it believes fraudsters have been using its online shipment tracking tool to harvest this information for these targeted phishing (or “smishing”) campaigns. The letter also said that “packages for a small group of shippers and some of their customers” were affected between February 2022 and April 2023. UPS has now limited access to this information to reduce potential misuse.
https://krebsonsecurity.com/2023/06/sms-phishers-harvested-phone-numbers-shipment-data-from-ups-tracking-tool/