Data leak may make clients quit Yuantong

An advertisement for Yuantong Express in Yichang, central China's Hubei province on Nov 25, 2012. [Ren Weihong/Asianewsphoto]

Shanghai police started investigating the incident on Wednesday and said preliminary analysis showed the information had been leaked by company employees.

A search for "personal information" with "express delivery" on Taobao showed more than 2,800 results on Thursday. The price of information relating to one person was usually less than 1 yuan ($0.16), depending on the number of purchases made.

A China Daily reporter contacted three stores who sell information on Taobao, and all of them said they only have the information sourced from Yuantong.

One store manager said the information comes from her friend who works at Yuantong.

Zhou said the cause of the leak is a new database at Yuantong containing details of all customers that have used their express service, including their personal information. He said the database is required by law.

"The purpose of the database is for customers to track the progress of their package and it's also easy for customers to obtain information on the packages they have sent through the system," Zhou said. "Moreover, if someone sends prohibited goods, he or she can be traced with the information from the system."

Several other courier companies have databases, but Yuantong's is the most complete, including names, phone numbers and addresses, according to Zhou.

"If the poor handwriting confuses the courier, it's easy to type in a customer's name or phone number in the database and find the corresponding address. That's why we include addresses in the database," he said.

A courier with Quancheng Express in Shanghai, who asked to remain anonymous, said that few delivery personnel would think it worthwhile to sell customer information. They work to tight deadlines, he said, and the amounts of money to be made from selling information are too small.

"If the leak was caused by several couriers, the amount of the leaked information cannot be big. It might be some senior managers from the company," said a senior manager of a courier company in Shanghai, who declined to be named.

In August, public prosecutors in Shanghai warned of a sharp increase in the theft of personal information, with criminals stealing and selling data for various purposes, including telecom fraud, racketeering and burglary.

In March, the government brought into effect a new regulation, the Management Measures of the Express Market, stipulating that courier companies and employees are forbidden to provide personal information obtained in the course of their work.

Those found guilty of breaking the regulation will be given a fine ranging from 10,000 yuan to 30,000 yuan.

You may also want to read

Shanghai Yuantong Express to go public: report