Severe disruption to Royal Mail's overseas deliveries has been caused by ransomware linked to Russian criminals, the BBC has been told.
The cyber-attack has affected the computer systems Royal Mail uses to despatch deliveries abroad.
Royal Mail has been warning customers since Wednesday of disruption due to a "cyber-incident".
Its latest advice is for people not to try to send international letters and parcels until the issue is resolved.
Ransomware is malicious computer software that encrypts data and locks up systems.
The ransomware used in the attack is "Lockbit", according to a source close to the investigation.
Computer security firms say the software has been developed and used by criminal gangs with links to Russia.
The BBC has seen a ransom note sent by the criminals to Royal Mail which reads: "Your data are stolen and encrypted."
The ransom demand is expected to be in the millions, although sources close to the investigation say there are "workarounds" to get the system going again.
Ransomware attacks are a persistent threat to organisations around the world, with attacks happening on a near-daily basis.
But this situation is highly significant, as Royal Mail is what is deemed "critical national infrastructure" – that is, it is critical to the UK economy.
The attack is not just affecting one company and its customers, but the communications and businesses of citizens at home and abroad.
Ransomware crews typically ramp up pressure on firms to transfer funds in a cryptocurrency such as Bitcoin to an anonymous digital wallet.
They will have a deadline and are likely to be threatening Royal Mail with the prospect of having potentially sensitive data published.
LockBit is thought to have strong Russian roots but the hacker that carried out the attack could be anywhere.
In November a Russian-Canadian national was arrested for allegedly carrying out LockBit hacks from Canada.
This video can not be played
Watch: What is ransomware and how does it work?
A Royal Mail spokesman declined to comment on whether the attack was ransomware, but repeated warnings to customers that there is no end in sight to delivery disruption.
The firm is still unable to send letters and parcels overseas and says it is "working hard" to fix the issue.
There are also minor delays to post coming into the UK, but domestic deliveries are unaffected.
It said that some customers who had posted items abroad even before the "incident" might see delays.
A National Crime Agency spokesperson said it was "aware of an incident impacting Royal Mail" and was working alongside the National Cyber Security Centre, which is part of the UK's cyber-intelligence agency GCHQ, to understand its impact.
The back office system that has been affected is used by Royal Mail to prepare mail for despatch abroad, and to track and trace overseas items.
It is in use at six sites, including Royal Mail's huge Heathrow distribution centre in Slough, as well as its Bristol site.
Royal Mail has faced a number of hurdles in recent months including delivery delays as postal workers strike over pay and conditions.
Have you seen disruption to your international deliveries with Royal Mail? How has it affected you? Share your experiences by emailing haveyoursay@bbc.co.uk.
Please include a contact number if you are willing to speak to a BBC journalist. You can also get in touch in the following ways:
If you are reading this page and can't see the form you will need to visit the mobile version of the BBC website to submit your question or comment or you can email us at HaveYourSay@bbc.co.uk. Please include your name, age and location with any submission.
Suspected ransomware attack on Guardian newspaper
Schools hacked and information leaked on dark web
Unlikely anyone survived Nepal plane crash – police
Video shows Nepal plane roll moments before crash. Video
Global firms fuelling Myanmar's killer weapons
Can humanity's new giant leap into space succeed?
Why morning light is so crucial to your health. Video
Ten little-known facts about Martin Luther King
Lab-grown alternatives aim to cut palm oil dependence
Is India seeing a decline in violence?
Unsettling images of invisible 'spirits' around us
The man who first discovered plastic in the ocean. Video
VR headset prices high as Apple bides its time
Plan for a million Christians to visit Jesus site
Britain's lost and legendary 'Area 51'
The axed workers posting epic goodbyes
The skiers dedicated to alpine warfare
© 2023 BBC. The BBC is not responsible for the content of external sites. Read about our approach to external linking.
