ParkMobile data breach: 20.9M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-04-30
In March 2021, the mobile parking app service ParkMobile suffered a data breach which exposed 21 million customers' personal data. The impacted data included email addresses, names, phone numbers, vehicle licence plates and passwords stored as bcrypt hashes. The following month, the data appeared on a public hacking forum where it was extensively redistributed. Exposed data: email addresses, licence plates, names, passwords, phone numbers. The breach dates from Mar 21, 2021; Have I Been Pwned loaded it on Apr 30, 2021.
What to do
- If you had a ParkMobile account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
