Protecting Postal Service™ information requires more than defending against outside attackers. An insider threat occurs when someone with authorized access uses that access, intentionally or unintentionally, in ways that could harm USPS® information, systems, or operations.
Employees and contractors use postal resources every day to serve customers and support operations. That access comes with a responsibility to handle information carefully and follow established security procedures. Even a well-intended shortcut can create an opportunity for information to be exposed or misused.
Insider threats can take different forms. Deliberate actions may include accessing records without a business need or disclosing restricted information without authorization. Unintentional actions may include sending sensitive information to the wrong recipient or granting broader file access than necessary. Both can affect employee privacy, customer trust, and the continuity of postal operations.
Employees and contractors can help reduce these risks by doing the following:
n Protect your credentials. Never share passwords or authentication codes and only approve authentication requests you initiate.
n Use access responsibly. Access only the information and systems needed for your assigned duties.
n Handle information carefully. Verify recipients and permissions and use USPS-approved tools to store and share information.
n Secure your workspace. Lock your screen when stepping away and safeguard sensitive documents.
If you observe insider threat activity, please report them via email to the Insider Risk program at insider_risk@usps.gov. If you notice individual(s) posing an imminent danger to Postal Service assets or personnel, please call United States Postal Inspection Service® (USPIS®) directly at (877) 876-2455 (option 2).
Early reporting gives cybersecurity professionals an opportunity to assess the situation and limit potential harm.
For more information about insider threat, go to CyberSafe at USPS® Blue and LiteBlue pages for additional information.
— Corporate Information Security Office,
Chief Information Officer, 11-12-26
