The express noodle list you threw away is being sold in bulk, ranging from 1.5 to 5 yuan, and the maternal and child category is the most popular.

Double Eleven is coming, which will usher in a "big explosion" in the number of express delivery. Nowadays, express delivery has played an indispensable role in people's lives, but express delivery orders printed with personal information such as consumers' names, addresses and telephone numbers are being sold in batches. In this gray industry, express orders are called "materials". In order to avoid being reported, some buyers and sellers frequently change their contact information and adopt social tools with better confidentiality.

Last year, the national express delivery business volume was 83.3 billion pieces, and the national express delivery business volume will soon exceed 1000 billion pieces. Massive private information, where to go?

Express orders range from 1.5 to 5 yuan, so both buyers and sellers are very wary.

In the post bar related to express delivery, there are a lot of express delivery information to buy and sell. In this industry, there has been a set of mature network slang. The information of purchasing noodles is called "receiving materials" and "receiving vegetables", and the noodles printed with personal information of users can be bought and sold at will. There are also "chains of contempt" in different faces. Real-time and daily life is better than history, and consumer goods such as mother and baby, skin care, women's wear and alcohol are more popular. Noodles that are not classified are called "mixtures". The delivery list is divided into two forms: photos and documents. In order to avoid being discovered by the platform, buyers and sellers also like to use acronyms and homonyms instead of "noodles", such as KD (Express Noodles), MD (Noodles), "Noodles" and "Noodles".

1October 26th 10, a landlord named "Pattern" posted that: the strength of food collection, direct docking with the first-hand studio, real-time, history, large number of people, and priority in classification. 1October 25th 10, a netizen named "noodles receiving" said: find a courier salesman, noodles receiving driver, warehouse owner, warehouse staff, warehouse management, and collect a lot of noodles, history and private chat.

There are also many sellers advertising in the post bar. 10 10. On 24th of October, the netizen "Ning Jiu 12 13" claimed that there was a document of high-quality women's clothing (face sheet), which needed private chat. This industry is also full of mutual pits of "own people". Someone exposed the seller's account and shared his experience of being cheated in selling information: "This person is a liar. More than a thousand (face sheets), only 500 were screened out yesterday, I said it was mixed. " Someone commented, "Why didn't you call me?" "This person is also in our group."

"Is there anything to lose?"

"Send a sample to see, how many can there be a day?"

"Five dollars each."

"Mother and baby, beauty."

"What platform? What time? Can you know the name of the shop? "

Sellers sell user information in real time, and female consumers are regarded as "gullible"

In the group of buyers, sellers who sell real-time and same-day orders will be particularly active after 5 pm. At this time, the courier will generally start to collect the pieces, and the electronic face sheet information will be stored in the work computer or printed on the package, and the leaked user information will also begin to flow in the underground market. This means that the user's information is sold on the same day.

Advertising harassment, telecom fraud ... what will the courier number be used for, which is disturbing. The express order number not only involves personal information, but also reveals the consumer demand of users. What is worrying is that criminals are eyeing the consumer groups of maternal and child and beauty products. According to "insiders", the "conversion rate" of mother-infant face is high, which is "easy to cheat" to put it bluntly.

"Invisible Face Sheet" can't fundamentally eliminate the leakage of express information.

In a case pronounced by Shenzhen Nanshan District People's Court in July, 20 16, it was revealed that a courier employee stole more than 65,438+pieces of customer personal information by downloading software in batches from the second half of 20 14 to July, 20 15.

20 19 10, a logistics company in Shanghai found someone selling its company's express data on telegram. Company employees tried to buy 36 pieces of data from each other, and found that the data were true and effective.

The express bill contains most of the user's private information. How to ensure safety?

Not long ago, as a special activity of 20021National Cyber Security Publicity Week, the Express Industry Cyber Security Summit was held in Shanghai, where express logistics enterprises gathered. At the summit, Song Zhuoya, senior director of Debon's Information Security Center, said that at present, criminals sell personal privacy information at a clear price in the "dark net", resulting in hundreds of billions of losses every year, and the express delivery industry is the hardest hit.

Zeng Bihan, director of logistics technology digital business of Cainiao Company, said: "We look forward to converting the real mobile phone number of the recipient into a virtual mobile phone number (you can call and send text messages) through technical means, and printing it on the face sheet to protect the privacy and safety of the recipient."

Fu Mingming, chief information security officer of Zhongtong Company, believes that in the face of these security challenges and risks, Zhongtong is exploring a "zero trust" solution, that is, "continuous verification, never trust".

However, from the current survey, there is still a long way to go before the information disclosure of express delivery orders, and users' information is still "streaking".

Some courier companies have also made many attempts, such as launching "invisible face sheets", where sender information is replaced by numbers. But this is only the "first lock", and the insiders who can enter the system in the express delivery industry can still obtain user information. In fact, most of the personal information leakage incidents occurred within the enterprise. Earlier, an internal investigation of a courier company found that the first-line outlets sold customers' personal information to a courier of the same company for two years, totaling more than 4,000 pieces. Many customers of another courier company have received fraudulent phone calls. According to the company's investigation, an employee of the company inquired about more than 20,000 customer records in a month, and repeatedly used other people's accounts to inquire about information.

Lawyer: If the courier sells user information, the enterprise may face administrative punishment.