How to prevent personal information from being leaked when sending or receiving packages? On this forum, "big shots" come to offer suggestions
Abstract: Once personal information is leaked, criminals can "precisely take action" to commit fraud.
Ms. Xu was using her mobile phone to access the internet when she suddenly received a "friend message" stating that she had found a package on Amazon and needed Ms. Xu's help to make the payment. Ms. Xu had no doubts and transferred 160000 yuan to the designated account. She realized that she had been scammed and called the police.
Ms. Yang received a QQ friend application from a stranger, and after approval, the other party sent her a website address, stating that as long as she followed the customer service prompts on the website to recharge and "buy up" or "buy down", she could make a profit. Ms. Yang transferred more than 330000 yuan to the designated account before realizing that she had been scammed and then called the police.
Ms. Chen received a video call stating that she has opened an insurance policy and is about to start deducting fees. If she wants to cancel, she needs to download a designated app. After downloading, Ms. Chen carried out the operation of "canceling the activation of insurance", and her online banking account was transferred more than 250000 yuan, which was later reported to the police.
Recently, the "Logistics Sub Forum" of the 2023 National Cybersecurity Promotion Week in Shanghai was held at the National Convention and Exhibition Center located in Qingpu District. On the forum, staff from Shentong Express shared several telecom fraud cases and pointed out the commonality of these cases: before the criminals engaged in fraud, they accurately obtained the victim's mobile phone number, instant messaging software account, Weibo account, and other application software account information.
How was this privacy information leaked? In addition to hacking, e-commerce platforms, or third-party software acquisition, privacy leaks during receiving and sending express delivery are easily overlooked. In fact, a small express waybill contains the recipient's name, phone number, home address and other private information, and the recipient's shopping information can also be found through the waybill. How to ensure information security when receiving and sending parcels? On the forum, many experts discussed and provided suggestions.
Last year, the postal industry in China completed 139.09 billion parcels, a year-on-year increase of 2.7%. Among them, the express delivery volume completed 110.58 billion parcels, a year-on-year increase of 2.1%. Chen Sheng, Senior Security Engineer of Zhongtong Express, said that data governance in the express logistics industry is crucial. Data should be classified and graded accordingly, and then corresponding permissions should be controlled. "To ensure that the collected data is limited to the minimum scope for completing the delivery service operation, it is not allowed to provide information related to users to others for improper purposes, and safety education and training should be conducted for practitioners."
According to personnel from Shanghai Luoan Information Technology Co., Ltd., the premise for the success of the increasingly rampant telecommunications fraud is that criminals have accurate personal information, and logistics and express delivery companies, medical institutions, schools, and others all have information leakage risks. Once an individual's ID card number, photo, mobile phone number, home address, vehicle under his name, shopping records, loan records, etc. are disclosed, criminals can "accurately" commit fraud. "For express logistics companies, attention should be paid to issues such as insufficient coverage of security defense software and security devices that have not been connected to data flow. Companies need to confirm the effectiveness of existing protection measures through continuous security verification."
In recent years, the country has introduced multiple laws and regulations on data security, such as the Cybersecurity Law, the Password Law, the Data Security Law, and the Personal Information Protection Law. Police Officer Shen Yu from the Cybersecurity Detachment of the Qingpu Branch of the Public Security Bureau stated that in order to effectively respond to cybersecurity incidents in the postal and logistics industry, the public security cybersecurity department strictly follows legal regulations and conducts comprehensive supervision and inspection of postal enterprises in its jurisdiction, focusing on basic management, application management, data management, interface management, and other aspects. "I hope to work together with the police and enterprises to prevent important information systems from being compromised and citizens' personal information from being illegally obtained as much as possible."
Currently, 9 express delivery headquarters enterprises have settled in Qingpu District, and more than 200 express delivery operating license enterprises have gathered. Express logistics is one of the key industries to be developed in Qingpu, and it is also the first billion dollar industrial cluster in Qingpu. In 2022, Qingpu District achieved a revenue of 156.8 billion yuan from its express delivery business, a year-on-year increase of 13.9%, accounting for 85% of the city's total and 14.8% of the country's total; In the first half of this year, Qingpu District achieved a revenue of 78.43 billion yuan from its express delivery business.
Qingpu District has held the Postal and Logistics Industry Cybersecurity Forum for four consecutive years, which is also a featured project of the National Cybersecurity Week in Shanghai. The relevant person in charge of the Cyberspace Administration of Qingpu District Committee stated that Qingpu District will continue to promote network security work in the postal and logistics industry, and strive to create a clean and positive network environment.
