CTT 2026 Data Breach
The CTT data breach affected approximately 468,124 unique email accounts associated with Portugal's postal service on April 26, 2026. The confirmed data types are email addresses, names, phone numbers, and shipment tracking numbers.
Exposed Data Types
4- Email addresses
- Names
- Phone numbers
- Shipment tracking numbers
About This Breach
A tracking number can provide delivery-stage or buyer-seller context, making fake delivery, customs-fee, address-confirmation, or return messages more convincing. Passwords, payment cards, official IDs, full addresses, and package contents are not confirmed fields for this record.
A match means that the email address appears in the CTT dataset; it does not prove that a password or payment card was exposed. Open the official tracking page directly, reject payment requests received by phone, and do not enter information through links in delivery messages.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
