A technical SNAFU shut down the UK’s Royal Mail Click and Drop website on Tuesday after a security “issue” allowed some customers to see others’ order information.
The data leak started around 13:00 GMT, and according to an alert posted on Click and Drop’s status page, Royal Mail shut down the website about an hour later.
In an update posted shortly before 14:00 GMT, the postal service noted:
We have been made aware there was an issue affecting Click & Drop that meant some customers could see other customers’ orders. As a protective measure, we have stopped access to Click & Drop temporarily. We fully understand and apologise for the inconvenience caused by this. Our engineers are working as hard as possible to get the site back up and running as expected. Further updates will be posted here as soon as we have more information.
In subsequent alerts, Royal Mail assured customers that its engineers continued to work on a fix and hoped to have the site back online “as soon as possible.” The service, which allows customers to print labels and pay for postage online, and then track packages until they reach their destination, vowed that it was “treating this as the highest priority.”