Park ‘N Fly, One Stop Parking Confirm Breaches
Summary: Park 'N Fly and OneStopParking.com both confirmed breaches after KrebsOnSecurity reported in late 2014 that batches of stolen card data for sale in the Rescator crime shop traced back to the two airport parking services. OneStopParking manager Amer Ghanem said hackers entered through a Joomla vulnerability patched in September 2014 that the company delayed applying because the update broke parts of its site, while Park 'N Fly said its e-commerce payment card data was compromised and that the incident has been contained.
Key Takeaway: The stolen data included card numbers, names, billing addresses, expiration dates and CVV codes, sold at $6 to $9 per card in the same Rescator shop that moved cards from the Home Depot and Target breaches. OneStopParking's breach turned on a patch it had available for months and chose not to apply because the update broke its site.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026