USPS tightens online security after fraudsters steal employees' paychecks

[mahatmakanejeeves]

PAY

USPS tightens online security after fraudsters steal employees’ paychecks

Jory Heckman @jheckmanWFED
January 20, 2023 5:27 pm
4 min read

The Postal Service is tightening its online security measures, in response to fraudsters targeting the financial information of USPS employees. ... USPS, in a memo to its workforce on Tuesday, warned that cyber criminals are targeting USPS employees by creating fake websites that closely resemble LiteBlue, the agency’s online employee portal.

Postal unions are warning members that fraudsters are using these spoofed websites to obtain USPS employees’ login credentials, and reroute direct-deposit paychecks to their own bank accounts. ... LiteBlue allows employees to their paycheck information, access their Federal Employee Health Benefits (FEHB), access their Thrift Savings Plan and contact USPS human resources.

USPS told employees in this week’s memo that it shifted LiteBlue to multi-factor authentication (MFA) on Jan. 15. ... USPS will require employees logging into LiteBlue to reset their password, verify the last four digits of their Social Security Number, and set up their multifactor authentication preferences. ... Once enabled, USPS will require employees to enter an MFA code prior to accessing their online accounts.

{snip}

[Chalco]

1. lots of thefts here at local branches

A few nearby USPS locations have seen mail that appear to include
personal checks have been stolen over the last few weeks. It's under
investigation.