HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedFINANCIAL_ACCOUNTPIILowContained
ABM Parking
bd_508a915e7358bcca · schema v1 · pii pii-v1
Full breach record for ABM Parking →ABM Parking Services, Inc. disclosed a data security incident involving its vendor, Datapark USA Inc., affecting nine Chicago parking facilities. The incident, occurring between September 29 and November 18, 2014, compromised customer credit and debit card information. ABM engaged forensic experts, notified law enforcement and credit card brands, and offered one year of Experian ProtectMyID to affected individuals.
California clockDiscovered Oct 31, 2014 → Notified Dec 5, 201435d ✓ CA 60-day OK6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-47710
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2014
- Raw hash
- db342efd47d33331902242b08626f792f155a32b16787a9cccfc776e25b181b0
Reporting entity
- Name
- ABM Parkingnorm: abm parking
- Domain
- abmparking.com
Victim entity
- Name
- ABM Parkingnorm: abm parking
- Domain
- abmparking.com
Incident
- Discovered
- Oct 31, 2014
- Materiality determined
- —
- Notification sent
- Dec 5, 2014
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Third party
- via Datapark USA Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 35d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 31, 2014→ Notified: Dec 5, 201435d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.