Two parolees arrested in a Sunnyvale mail-theft case were allegedly sitting on more than 80 pounds of stolen mail — a pile that maps almost exactly onto the vulnerability postal investigators have been warning about for three years: the shared mailbox banks bolted to the front of apartment and condo complexes.

The arrests, announced by the Sunnyvale Department of Public Safety and picked up across Bay Area outlets this week, are being told as a crime-blotter win. But the details — a tool that relocks boxes so thefts go unnoticed, seized U.S. Postal Service locks, victims strung across six cities — describe a national failure point that a $1.4 billion federal fix has so far failed to close. The suspects were caught; the weak spot they exploited is still standing at thousands of Bay Area addresses.

The case took shape over the summer. By the department's account — carried this week on the Bay City News wire and by ABC7 — a Sunnyvale community services officer flagged a cluster of look-alike reports back in July: mail vanishing from shared boxes. The U.S. Postal Inspection Service had already tipped the department to the pattern, and detectives ultimately connected the losses to more than 40 community mailboxes.

Two people, both on parole, were arrested. The department did not release their names and booked them into Santa Clara County Jail. At one suspect's home, investigators say they turned up break-in tools, USPS mailbox locks and roughly 100 items of mail believed stolen. At the second suspect's residences, they report recovering the 80-plus pounds — plus more burglary tools and suspected methamphetamine. Inside were checks, credit cards and other personal information belonging to residents across the South Bay and beyond: Sunnyvale, Mountain View and San Jose, plus Menlo Park, Oakland and Sausalito.

The method is what makes this more than a blotter item. The thefts concentrated at big residential developments — the kind where a single bank of boxes serves scores of units, which is how one break produces, in the department's words, "numerous victims." Police described a tool that popped those boxes open while leaving them looking secure. A route can be drained for weeks that way before anyone reports it, and before a carrier or resident even knows to.

That is precisely the gap postal investigators have been charting nationally. In its mail-theft strategy (external source, opens in a new tab), the Postal Inspection Service reported that on-the-job robberies of carriers rose roughly sixfold from 2019 to 2022, the year 412 were robbed — often for their "arrow keys," the masters that open every cluster box along a delivery route. The Government Accountability Office (external source, opens in a new tab) counted 406 arrow keys stolen in 2022 with only 74 recovered, alongside more than 38,500 high-volume theft incidents from mailboxes that year. A single stolen lock or key, then, is less a Sunnyvale problem than a portable entry credential.

The thefts concentrated at big residential developments — the kind where a single bank of boxes serves scores of units, which is how one break produces, in the department's words, "numerous victims."

It also moves off the books. Asked whether mail theft goes underreported, U.S. Postal Inspector Matthew Norfleet told ABC7: "Oh, absolutely. Yes." He described the seized mail as feedstock for a resale trade, bartered for drugs or cash, and stressed that the thieves range well past any single neighborhood — which is why one Santa Clara County arrest turned up letters addressed as far off as the North Bay.

The people most exposed are the carriers themselves. Ernie Arrañaga, who leads the San Jose letter carriers' local, Branch 193, told the station some of his members have been "assaulted or assaulted at gunpoint" as thieves hunt the keys. His union is backing the Protect Our Letter Carriers Act (external source, opens in a new tab), which would authorize $1.4 billion a year through 2029 to replace vulnerable boxes with high-security models and toughen penalties for attacking carriers.

That is where the systemic story stalls. Introduced in February 2025 with a Senate companion, the bill has drawn 211 House cosponsors — and still sits in committee, with legislative trackers rating its odds of passage in the low single digits. Until it moves, the defense against the vulnerability Sunnyvale just documented is the one residents have always had: check the box often, and flag the mail that never arrives.