Royal Mail resumes ‘limited’ overseas deliveries after cyber attack

Royal Mail has resumed some international deliveries more than a week after a damaging cyber attack, although customers are still being warned against sending parcels abroad because of disruption to its computer systems.

The cyber incident involved a ransomware attack where hackers typically lock a company out of its own systems before demanding payment to restore access, according to a document seen by the Financial Times.

The UK’s main provider of postal services, which was targeted by criminals claiming to represent the prolific hacker group LockBit, said it has started sending “limited volumes” of parcels overseas.

It added that it is working with France, Germany and the Netherlands to find a workaround to the attack, which hit its system that produces the documentation needed to send items across borders.

However, despite the restart of limited volumes, Royal Mail repeated its request to customers not to submit any new parcels for international delivery.

Letters that require a customs declaration, which includes mostly everything except personal correspondence, also cannot be posted.

Royal Mail has declined to officially confirm whether the ransomware attack by LockBit, a group believed to be located in Russia and nearby countries, is responsible for the disruption.

During a parliamentary hearing on Tuesday, Royal Mail chief executive Simon Thompson told MPs he had been informed “that to discuss any fine details . . . would actually be detrimental”.

The attack on Royal Mail, which would be LockBit’s biggest target to date, has deepened concerns about the increasing cyber risks faced by businesses and operators of critical national infrastructure.

Royal Mail continues to work with external experts, the security authorities and regulators to mitigate the impact, the group said.

“We would like to sincerely apologise to impacted customers for any disruption this incident may be causing,” Royal Mail added. “Please be assured our teams are working around the clock to fully resolve this situation.”

The incident follows disruption from 18 days of strike action by Royal Mail workers during the second half of last year.

The Communication Workers Union, which represents about 115,000 postal workers, has announced plans for a fresh ballot on strike action, with results to be declared on February 16.