DisclosureLens
HackingTransportation & LogisticsTransportationStolen CredentialsData ExfiltratedTargetedPCIFinancial accountCredentialsPIILowContained

Park'N Fly

bd_408c80d823e38689 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 13, 2015

Filed

Jan 20, 2015

To disclose

7 days

Affected

738state residents only

Linked

5 filings

Confidence

64%
Full breach record for Park'N Fly →4 incidents on file

Park 'N Fly notified customers of a data security event involving payment card data processed through its e-commerce website. The incident affected data from cards used between November 27, 2013, and December 24, 2014. Compromised data included card numbers, names, billing addresses, expiration dates, CVV codes, and potentially loyalty account credentials. PNF engaged forensic experts, enhanced security, implemented PayPal hosting, and offered 12 months of identity protection.

Incident timeline

undetected · 412 days
discovery → filing · 7 days

Nov 27, 2013

Begins

Jan 13, 2015

Discovered

Jan 20, 2015

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
New Hampshire State AGDec 30 · first
California State AG+14d
Massachusetts State AG+21d
New Hampshire State AG+21d
South Carolina State AG+21d · this page

Pattern: first filing Dec 30 (NH), last Jan 20 (SC) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.