UPS smishing refers to the SMS phishing attack that occurred after the data breach at UPS Canada. Threat actors impersonated UPS package notifications, claiming recipients needed to make payments before package delivery. The breach exposed customer information, including addresses and phone numbers, leaving some customers vulnerable to fraudulent text messages. UPS alerted affected customers and took measures to mitigate the risk.