Bad news for those who use Park N’ Fly. CTV News is reporting that there’s been a data breach as a result of “unauthorized access”:
The company confirms a third party accessed its network through unauthorized remote VPN access between July 11 and July 13.
When the hack was detected the company said its information technology team and a cyber security partner launched an investigation to find out what information was accessed.
According to the company, the information compromised could include basic customer information such as names, email and mailing addresses as well as Aeroplan and CAA numbers.
Park’N Fly said it “can confirm with certainty” that payment information was not compromised as it does not store customer credit cards or passwords on its servers.
I can’t count the number of times that a company that has been pwned says that a limited amount of customer information has been accessed, only to find out later that way more customer information has been accessed. Thus I take anything that the company says with a grain of salt until they provide definitive proof that what they are saying is true. If you’re affected by this, you should have already received an email about this. And I would do the usual things like monitor your credit cards, maybe get credit monitoring, etc while you wait on the company to provide more and hopefully robust details about what happened.
UPDATE: Rogier Fischer, CEO, Hadrian had this comment:
“While Park’N Fly has taken steps to improve security post-incident, proactive measures such as regular security audits, stronger authentication for VPN access, and customer education on cybersecurity could help mitigate similar risks in the future,” said Rogier Fischer, CEO of Netherlands-based cybersecurity service Hadrian.
“The company may face legal obligations to report the breach under data protection laws, such as Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Additionally, the incident could harm their reputation, affecting customer trust and future business if not handled transparently and effectively.”
Related
This entry was posted on August 26, 2024 at 3:42 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Park N’ Fly Pwned And Customer Data Leaked
Bad news for those who use Park N’ Fly. CTV News is reporting that there’s been a data breach as a result of “unauthorized access”:
The company confirms a third party accessed its network through unauthorized remote VPN access between July 11 and July 13.
When the hack was detected the company said its information technology team and a cyber security partner launched an investigation to find out what information was accessed.
According to the company, the information compromised could include basic customer information such as names, email and mailing addresses as well as Aeroplan and CAA numbers.
Park’N Fly said it “can confirm with certainty” that payment information was not compromised as it does not store customer credit cards or passwords on its servers.
I can’t count the number of times that a company that has been pwned says that a limited amount of customer information has been accessed, only to find out later that way more customer information has been accessed. Thus I take anything that the company says with a grain of salt until they provide definitive proof that what they are saying is true. If you’re affected by this, you should have already received an email about this. And I would do the usual things like monitor your credit cards, maybe get credit monitoring, etc while you wait on the company to provide more and hopefully robust details about what happened.
UPDATE: Rogier Fischer, CEO, Hadrian had this comment:
“While Park’N Fly has taken steps to improve security post-incident, proactive measures such as regular security audits, stronger authentication for VPN access, and customer education on cybersecurity could help mitigate similar risks in the future,” said Rogier Fischer, CEO of Netherlands-based cybersecurity service Hadrian.
“The company may face legal obligations to report the breach under data protection laws, such as Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Additionally, the incident could harm their reputation, affecting customer trust and future business if not handled transparently and effectively.”
Share this:
Like this:
Related
This entry was posted on August 26, 2024 at 3:42 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.