Express Industry Integrity Emergency, personal information is facing a serious leakage crisis

Recently, there is news that Yuantong Express has millions of customer information on the Internet is sold. October 25, Yuantong Courier said, at present, reselling its express number of the website has been shut down, the internal discovery of information security vulnerabilities have been basically blocked. Yuantong is further taking relevant follow-up measures to protect the express information security.

Express Industry Integrity Emergency, personal information is facing a serious leakage crisis. Commercial newspaper reporter survey found that daily online transactions in the number of express number as high as 30,000, not only for personal privacy security brings great harm, but also seriously endanger the development of the entire express industry.

Scalping Yuantong Number website has been shut down

22nd night, Yuantong Express issued a statement, acknowledging the "express face single information scalping" is true, and to consumers apologize.

25th, Yuantong Express announced the latest progress, said that as of 24th afternoon, reselling the illegal website of Yuantong Express number has been closed, Yuantong has organized specialized personnel all-weather network monitoring to prevent reselling phenomenon "resurgence."

Yuantong Courier said, as of 25th early morning, the company found inside the information security loopholes have been basically blocked, the partial information security management of the network has been severely dealt with, and the staff education, training, assessment.

Meanwhile, on the lawless elements of their shipments of information, Yuantong Express, has been legally reported to the public security departments, and will take the following emergency measures: first, the company's internal comprehensive investigation, to find the source of information leakage; second, joint information technology partners, eliminate hidden dangers, enhance the express information security management level; In conjunction with the main business partners, information systems interface between the mutual check; Iv. The progress will be announced in a timely manner.

In addition, Yuantong also announced the information Scalping Report hotline, the commitment to report the illegal and criminal acts, confirmed by the public security organs to accept the case, Yuantong will give rewards.

"Inside Ghost" leak number is scalping

How is the courier number information leaked? Yuantong Express Information Technology Management Center Senior Director Tin Bing said, may be some management Area staff leaked account password, "Inside Ghost" suspicion is very big. According to the flexible information protection measures, from the outside the network into the data center to grab a number of information data may be basically zero, "if you have a large number of access to the account password, some hackers can access the data, and then through the technical means to directly grab the information data, it is difficult to find.

October 19 to 23rd, the reporter to the consumer status of the advisory tact, rhyme Tatsu, Shun Fung and other Express Company's 11 courier, heard to pay number, almost all courier have expressly refused.

"The documents are to be surrendered to the company and cannot be sold to you." "Shun Fung a courier told reporters, recently, express single leaked incident exposure, the company to express more stringent requirements," if found, not only to be expelled, but also to be fined.

Only one courier did not explicitly refuse, "What do you buy?" "He said, has met many people to his purchase courier number, but he sent up more than hundreds of parcels a day, like online that day to sell tens of thousands of express number, the general courier can not do.

Investigation

Buy your own Express bill

Yuantong Express Express number was leaked incident after exposure, October 22, readers Mr. Li called the business newspaper reporter said, courier number Network transactions continue, his personal privacy has been in the network "black Market" appeared.

"My first day of delivery, less than 12 hours on the Internet can buy a number." "Mr. Li is 3C digital products dealer, he not only in the Stone Bridge Shop, South Ping and other place of the digital plaza has physical stores, he also operates a Taobao shop." In order to enhance the credibility of their own shops, Mr Li, like other electric dealers, to their own shop "brush drill", "Frankly speaking is a false transaction, their own media."

October 18, Mr. Li is going to buy a few yuantong in the Internet sellers hand courier number, to their shop "brush drill." "1 dollars A, the result to buy their own number." He said, he bought from Chongqing to Chengdu, Guangzhou, Shanghai and other land 5 odd numbers, there is one is to send their own customers express.

Courier receipt has been sold in advance

October 23, according to Mr. Li's tips, reporter login Taobao input "number" keyword search, there are 2,891 pieces of baby. Most of these shops are labeled "logistics services", "Logistics number Inquiry", "National Two-way query service" and other names. Express single information general 1 Yuan/article, a large amount of words 0.8 yuan/article.

However, these shops on the page is not prompted by Taobao "Wang Wang" transactions, but provide QQ number alone. The reporter contacted QQ number 6304966XX sellers. "Where's the ship?" "6304966XX said, can buy fixed-point number, but need to wait 1-2 days," I want to find the right one.

23rd around 5:30 P.M., the reporter spent 1 yuan money to the seller "old" bought a designated from Chongqing Express number.

The same day 6:30 P.M., "Old Luo" through QQ to reporters a number of "7369810951" of the Yuantong Express numbers, the reporter online inquiry found no such number. Two hours later, the reporter again found that the Express list has been generated, but the computer display is 18:43 to collect the pieces from the Chongqing Stone Bridge Shop issued. In other words, 13 minutes before the courier receipt, the number has flowed out.

25th early morning, a number of sellers "Lao Luo" on Taobao for the reporter before the purchase of the number click "Delivery", and the delivery is a Yuantong Express "3332284411" express number.

Can be fixed to purchase about 30,000 per day transaction

"We bought it wholesale, too." "Old Luo" said, the wholesale website each day probably has 30,000 express number in the transaction.

"Lao Luo" said, Dan Hao began to add every day around 11 o'clock to the website, to 13 points can be updated to 8000~9000, to 16 can be updated to 1.8~2.5 million. has been added to 17 points, there are about twenty thousand or thirty thousand odd numbers. He specifically reminded said: "After 16 o'clock in the afternoon to buy a number, then the most complete, almost all the receiving cities have." ”

"Old Luo" says, all over the country as long as express can arrive place, its number can buy. Buyers only need to quote the shipping and receiving address, the seller can then find a matching courier number.

Scalping number of sellers gediya002 said, can send empty bag, that is, Virtual Express. "All the details are available, but no parcels are sent." "Gediya002 told reporters, such an empty package for the buyer is the purchaser himself, do not need to change the address. Buyers can specify the shipping address and delivery address, single number is not repeated, and Taobao has detailed logistics tracking, the bottom sheet. However, empty bags than ordinary express orders to more expensive, about 3 yuan a.

However, the address of the Express list may be specified to purchase, but sellers have said that the express company can not be specified, from the network of sellers to provide a single view, almost all from the Yuantong Express.

Use

Pay number "brush drill" or phone marketing

From the number of sellers, the reporter found that the number of courier to form a trading market, from the same as Mr. Li, through false transactions to elevate the credibility of sellers and praise.

In addition, some telephone marketing businesses will also buy a number of information. Ninkici, who lives four kilometres south of Ping, owns a "crown" shop, which is issued almost daily. "My mobile phone one months to receive at least 100 spam messages, let me go to So-and-so shop to buy clothes, or so-and-so shop new, inviting me to visit." But she said the Internet stores in the text message had not been visited before, but the other side had her phone number.

Industry insiders said, some express companies, electric dealers to the customer number is "Full name address" input, or even buy the product name is also written on the list. "These express orders contain a large number of quality customers, may be targeted by some ulterior motives." "Similarly, if consumers do not pay attention to protect personal privacy, will be filled with mobile phone number, address and other information of the courier package discarded, but also a privacy leakage path."

At the end of last year, the state post office issued a "on the strict prevention of the delivery of enterprises and employees to illegally disclose the use of postal services or courier service information," said the express enterprises and employees to illegally disclose the use of postal services or courier service information is an offence.

"If the customer has serious consequences, there is evidence that the accident is related to information leakage, the relevant companies to bear the corresponding responsibility." "Chongqing June Rui law firm lawyer Cao said that consumers should also pay attention to protect their privacy," send and receive express can use aliases and public address, as far as possible to reduce the leakage of personal information.

Recommendations

Perfecting laws and regulations to improve sentencing standards

The courier trade opened the door to a variety of criminal activities. Chenpengfei, a professor of economic law at the Southwestern University of Political Science and political Sciences, said that the express information is complete, easy to breed false mail, burglary, extortion and other criminal offences.

October 2012, a criminal in Xiamen, Fujian province, according to the acquisition of courier information, posing as a courier to enter a female white-collar home in the implementation of the robbery, and eventually killed.

March 1 This year, revised version of the "Express market management measures" implementation of the loss of goods, savage sorting, delay delivery and other key issues of the penalty standards have specific, clear provisions. However, the implementation of the regulations more than six months effect is not obvious.

According to the current law, no matter how much personal information is leaked or sold, sentencing is under 3 years, the illegal cost of outlaws is obviously too low. Wang Anbai, a professor at the Southwestern University of Political Science and political science, said that the relevant departments should improve the relevant laws and regulations, according to the seriousness of the personal information of reselling citizens to improve sentencing standards, so that outlaws get the punishment of their criminal behavior. Industry management departments should strengthen supervision, urge the express company to establish strict rules and regulations, such as in the labor contract and staff agreed to disclose customer information specific punitive measures to minimize the links in the individual contact customer information range.