1 million customers affected by the Park ’N Fly data breach

Park ’N Fly warns customers about a data breach incident discovered earlier this month. Based on reports, the intrusion has exposed the personal and account information of 1 million Canadian clients.

An investigation also revealed that the threat actors accessed the company’s network in mid-July using stolen VPN credentials. On August 1, the organisation discovered that client information was compromised during the incident.

Park ’N Fly is a significant provider of off-airport parking services in Canada, providing travellers with a convenient spot to park and keep their cars safe when departing from various airports across the country.

The company also provides shuttle, car washing, and oil change services and has facilities near airports in Toronto, Vancouver, Montreal, Edmonton, and Ottawa. However, the malicious incident has allegedly exposed customer details, such as full names, email addresses, physical addresses, flight numbers, and CAA numbers.

 

Park ’N Fly insisted that the data breach did not compromise financial or credit card information.

 

A Park ’N Fly representative explained that even though the attack has accessed a million customer files, everyone’s account passwords are still safe and protected. The representative added that the affected systems were fully restored within five days and that they are adopting extra security measures to safeguard their user information in the future.

The company also apologised that the incident caused its customers anxiety, but it wants to reassure its loyal clients and partners that its team is taking all necessary precautions to protect their information.

Additionally, the company claimed it would remain transparent and continue emphasising its systems’ integrity as its team resolved the problem.

However, customers who received letters still expressed disappointment in Reddit since they suffered another data breach incident. These recipients called out the long-standing practice of firms retaining customer data long after the service has been provided.

Some customers also indicated that exposing Aeroplan numbers might easily lead to account hijackings. The company advised them to reset passwords, especially those participating in Air Canada’s frequent-flyer club.

Park ’N Fly advises the impacted consumers to remain vigilant and wary of phishing attempts, whether by email or phone since the incident has exposed the necessary details for conducting such attacks.