Someone is selling account information for 21 million customers of ParkMobile, a mobile parking app that’s popular in North America. The stolen data includes customer email addresses, dates of birth, phone numbers, license plate numbers, hashed passwords and mailing addresses.
KrebsOnSecurity first heard about the breach from Gemini Advisory, a New York City based threat intelligence firm that keeps a close eye on the cybercrime forums. Gemini shared a new sales thread on a Russian-language crime forum that included my ParkMobile account information in the accompanying screenshot of the stolen data.
Included in the data were my email address and phone number, as well as license plate numbers for four different vehicles we have used over the past decade.
Read more on KrebsOnSecurity.
Catalin Cimpanu later tweeted that the listing on a popular forum had been removed, but that forum is not a Russian-language crime forum, so it’s not known to DataBreaches.net if there is still a listing of this data somewhere. A check of two popular Russian-language crime forums did not find it.