HackingTransportation & LogisticsTransportationSupply Chain (3P Vendor)Customer Data InvolvedPCIFinancial accountLowContained

ABM Parking

bd_508a915e7358bcca · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 12, 2014

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for ABM Parking →

ABM Parking Services, Inc. disclosed a data security incident involving its vendor, Datapark USA Inc., which provides point-of-sale software for nine Chicago parking lots. The incident occurred between September 29, 2014, and November 18, 2014, potentially exposing customer credit and debit card numbers. No other personally identifiable information was exposed. ABM engaged forensic experts, notified law enforcement and credit card brands, and offered one year of identity protection to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 29, 2014

Begins

Dec 12, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: ABM Parking
norm: abm parking
Domain: abmparking.com

Name: ABM Parking
norm: abm parking
Domain: abmparking.com
Industry: Transportation & Logisticsllm

Discovered: —
Breach occurred: Sep 29, 2014 – Nov 18, 2014
Materiality determined: —
Notification sent: Dec 5, 2014
Affected individuals: Not disclosed
Data types: PCIFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Notified law enforcementNotified credit card brands
Third party: via Datapark USA Inc.
Initial access: supply_chain

During the incident: Launched an investigation to confirm the nature of any unauthorized access
Engaged independent data forensic experts to assist with the investigation
Notified law enforcement
Notified credit card brands
Offered all affected individuals a complimentary one-year membership of Experian’s ProtectMyID Elite
Established a toll-free information line for customers
Changes made: Blocked access to prevent any further unauthorized entry into servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-47710
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2014
Raw hash: db342efd47d33331902242b08626f792f155a32b16787a9cccfc776e25b181b0

Reporting entityABM Parking

Victim entityABM Parking

IncidentThird-Party / Supply Chain

Stated responseLaunched an investigation to confirm the nature of any unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov