On Tuesday, ParkMobile, a digital payment service app that allows drivers to make metered parking payments via their smartphones, disclosed a data breach.
The company revealed on March 26 that it had discovered a breach connected to a problem with third-party software used in the ParkMobile app. ParkMobile has informed municipalities who use its app about the security incident, according to spokesperson Jeff Perkins.
According to the company, basic account records, such as license plate numbers, phone numbers, and email addresses, were accessed. On the other hand, no credit card details or purchase history was compromised.
The user’s information, such as driver's license number, date of birth, and social security number, is not collected by ParkMobile.
The company said in its statement, “We immediately launched an investigation with the assistance of a leading cybersecurity firm to address the incident. Out of an abundance of caution, we have also notified the appropriate law enforcement authorities.”
“Our investigation concluded that encrypted passwords, but not the encryption keys needed to read them, were accessed,” the company noted.
While the hackers did not gain access to unencrypted passwords, the company advised its users to update their passwords as a safeguard.
“While we protect user passwords by encrypting them with advanced hashing and salting technologies, as an added precaution, users may consider changing their passwords in the "Settings" section of the ParkMobile app.”
Users can also change their passwords online at the ParkMobileSettings page. Based on ParkMobile's website, the company serves 21 million users in major cities around the country.
The company also stated, “We have taken additional precautionary steps since learning of the incident, including eliminating the third-party vulnerability, maintaining our security, and continuing to monitor our systems.”
ParkMobile helps drivers to pay for parking using their devices without the need for cash. The app is available on both iPhone and Android devices and is free to download. Drivers who don't want to download an app can use a smartphone web browser to access ParkMobile.
Founded in 2000, ParkMobile is a major smart parking and mobility services provider in North America. Its infrastructure is used in different places around the country. It operates in top cities, including airports, college campuses, and stadiums.
The ParkMobile app is available in more than 450 cities throughout the United States, including Washington, DC, Chicago, Indianapolis, Pittsburgh, St. Louis, among others. For each parking session, users will pay a service fee.
