Mobile parking service RingGo, which is used by 4.3 million motorists across the UK, suffered a data breach in April 2017.
Customers who signed in saw that their personal information was not shown, but rather that of other users.
The passwords of an additional 1,400 people who were parking at the time of the event were disabled as a precaution, adding to the 600 people who were directly impacted.
The breach exposed names and phone numbers were accompanied by users’ vehicle information, including car model, colour, registration number and locations.
It also exposed some payment card data – the last four digits of users’ debit or credit cards.
Users who were impacted have been contacted by email, phone, and SMS by the corporation, which acknowledged that the incident was "completely unacceptable."
Source: https://blog.itgovernance.co.uk/blog/ringgo-parking-app-exposes-users-personal-information
TPRM report: https://scoringcyber.rankiteo.com/company/ringgo
"id": "rin13714822",
"linkid": "ringgo",
"type": "Data Leak",
"date": "04/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': [600, 1400],
'industry': 'Transportation',
'location': 'UK',
'name': 'RingGo',
'size': '4.3 million users',
'type': 'Mobile parking service'}],
'attack_vector': 'Unspecified',
'customer_advisories': 'Impacted users contacted by email, phone, and SMS',
'data_breach': {'number_of_records_exposed': [600, 1400],
'personally_identifiable_information': ['Names',
'Phone numbers'],
'sensitivity_of_data': 'Medium',
'type_of_data_compromised': ['Personal information',
'Vehicle information',
'Payment card data']},
'date_detected': 'April 2017',
'description': 'Mobile parking service RingGo suffered a data breach in April '
'2017, exposing personal information of users, including '
'names, phone numbers, vehicle information, and partial '
'payment card data.',
'impact': {'data_compromised': ['Names',
'Phone numbers',
'Vehicle information (car model, color, '
'registration number, locations)',
'Partial payment card data (last four '
'digits)']},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'Email, phone, and SMS notifications '
'to impacted users'},
'title': 'RingGo Data Breach',
'type': 'Data Breach'}