Sounded like the intercept occurred at the delivery service’s hub, not at either end.
Someone at Fox sent the tracking number to the thief.