Calgary’s parking authority exposed driver’s personal data and tickets

guest · Jul 28, 2021

Calgary’s parking authority exposed driver’s personal data and tickets
July 28, 2021
https://techcrunch.com/2021/07/28/c...ty-exposed-drivers-personal-data-and-tickets/

If you parked your car in one of the thousands of parking spots across Calgary, there’s a good chance you paid the Calgary Parking Authority for the privilege. But soon you might be hearing from the authority after a recent security lapse exposed the personal information of vehicle owners.

But a logging server used to monitor the authority’s parking system for bugs and errors was left on the internet without a password. The server contained computer-readable technical logs, but also real-world events like payments and parking tickets that contained a driver’s personal information.
The logs also contained some partial card payment numbers and expiry dates.

None of the data was encrypted.
Click to expand...

Security researcher Anurag Sen found the exposed server and asked TechCrunch for help in reporting it to its owner. The server was secured on Tuesday, a day after TechCrunch contacted the authority.

A spokesperson for the authority confirmed that the server was exposed since May 13, though data seen by TechCrunch shows records dating back to at least the start of the year. The authority also told TechCrunch that the exposure was due to human error and that it was investigating its logs to determine if anyone else had access to the server.
Click to expand...

Log in or Sign up

Calgary’s parking authority exposed driver’s personal data and tickets

guest Guest

Log in or Sign up

Calgary’s parking authority exposed driver’s personal data and tickets

guest Guest

Useful Searches