Park Mobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users
Summary: Account information for 21 million ParkMobile customers was offered for sale on a Russian-language cybercrime forum, including email addresses, dates of birth, phone numbers, license plate numbers, bcrypt password hashes and mailing addresses. ParkMobile attributed the incident to a vulnerability in third-party software, said no payment card data was affected, and stated it does not retain the salt values used with its bcrypt hashes.
Why it matters: The seller set a starting price of $125,000 for the database, and ParkMobile did not require or prompt users to reset passwords after a breach that exposed license plates tied to real vehicles and homes.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026