CTT Data Breach Exposes 468K Portuguese Accounts
In April 2026, data allegedly sourced from CTT, Portugal’s national postal service, surfaced on a public hacking forum. Have I Been Pwned reported that this breach impacts 468,124 unique email addresses.
The compromised dataset includes names, phone numbers, and parcel tracking numbers. Have I Been Pwned noted that these tracking numbers could be exploited to retrieve the complete tracking history of parcels, revealing sensitive logistical information.
This incident highlights the persistent risk to critical infrastructure. Even seemingly innocuous data like parcel tracking information can be weaponized for reconnaissance, social engineering, or to track individuals, underscoring the need for robust data protection across all operational layers.
What This Means For You
- If your organization relies on CTT services, or if your employees are customers, assume their personal and shipment data is exposed. Advise staff to be vigilant against phishing attempts leveraging parcel tracking details. For security teams, assess your third-party risk with CTT and similar service providers.
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
Free Tier - CTT Data Breach - Suspicious Data Exposure via Web Server
Written by SCW Research