Reported: 819 Hash Records Tied to the Express Mail Data Breach

HEROIC analysts logged a reported data breach for Express Mail, dated August 1, 2023. The report lists 819 records of email addresses and password hashes. It has not been confirmed, and "Express Mail" is used here as the stored name of the record and nothing more.

Hashed Passwords and What They Hide

Each hash in the report stands in for a password that has been scrambled. The scrambling method is not named, so there is no way to rate how well it holds up. What can be said is that weak passwords are the ones open to recovery, and that strong ones give a person time.

Items Named in the Record

• Email addresses, listed beside the hashes, and the target of any message that uses the name.
• Password hashes, scrambled passwords, whose protection depends on the method and the password itself.

What Follows If a Password Is Shared

If a person used one password for the Express Mail login and for an email inbox, the hash and the inbox are linked in practice. Recovery of the hash would put the inbox at risk, and the inbox could reset other logins. No recovery is claimed in the report, but the linkage is the reason to act.

The Shape of a Database Record

A database record lists the items a service held, one entry at a time. This record names two kinds of item and a date. It is unconfirmed, so keep the claim at a distance while you take care of your own passwords.

Settle It Either Way

To confirm either way, scan your email and see your information. If your address is listed, change the Express Mail password and any other password that matched it. An address from your employer and one from your own provider should both go through the scan. Give every site a password of its own, and let a manager remember them. The report lists those two item types and nothing more.