Canada Post disclosed a ransomware attack on a third-party service provider that exposed shipping information for their customers.