Park’N Fly Data Breach: PII of 1 Million Compromised by Cybercriminals

Canadian off-airport parking service provider Park’N Fly is notifying 1 million customers of a security incident involving their personally identifiable information.

According to a data breach notice sent to impacted customers, hackers gained access to the company’s network via compromised VPN credentials between July 11 and July 13, 2024. By Aug. 1, Park’N Fly determined that cybercriminals obtained access and potentially exfiltrated customer data.

"Park'N Fly discovered that an unauthorized third party accessed our network through remote VPN access," the letter reads. "Based on our investigation, we determined that the unauthorized activity occurred between July 11 and July 13, 2024. On August 1, 2024, we determined that some of your personal information was likely affected by the incident."

Compromised information includes:

· Full names

· Basic contact info such as email and mailing addresses

· Aeroplan and CAA number (if such data was provided)

“Please note that no financial or payment card information is stored on our servers and was not involved in this event,” the company emphasized in the letter to impacted customers.

Park’N Fly said it is working with third-party experts to enhance the security of their networks and recommends vigilance against phishing attempts.

What can users do to minimize risks?

In the aftermath of a data breach, including seemingly less impactful ones, you should:

• Change and strengthen passwords. Reset passwords for any accounts that used the same login credentials – even if the breach notice does not say passwords were involved. It’s best to be proactive; this way, you can inspect potential weak points in your security posture.
• Enable 2FA where possible for an extra layer of security and consider using a password manager to help you create and manage complex passwords
• Be cautious of phishing and scams. Scammers exploit breaches to conduct phishing attacks. Watch out for emails, texts or calls that request personal information, even if they seem legitimate.

If you suspect someone is trying to scam you, use Bitdefender Scamio, our AI-powered scam detection tool. Send any texts, messages, links, QR codes, or images to Scamio, which will analyze them to determine if they are part of a scam. Scamio is free and available on Facebook Messenger, WhatsApp, and your web browser. You can also help others stay safe by sharing Scamio with them in France, Germany, Spain, Italy, Romania, Australia, and the UK.

• Stay informed and follow updates from Park’N Fly. Stay updated on any communications from Park’N Fly about the breach, especially if they offer additional protective measures or information on the scope of the breach.

Has your data been part of a data breach or leak? Time to find out with Bitdefender’s Digital Identity Protection services. Here’s what you get:

- Instant Alerts. You can immediately react to data breaches and privacy threats and take swift action to prevent damage, such as changing passwords, via one-click action items.

- Real-time monitoring. The service continuously scans the internet and dark web for your personal information. You will receive alerts whenever your data is involved in a breach or leak.

- Peace of mind. The service immediately flags suspicious activity and actively monitors personal information for peace of mind.

- A 360° view of all your personal data. You can see your digital footprint, including traces from services you no longer use but that still have your data, and even send requests for data removal from service providers.