EasyPark: hashed passwords were also stolen during a cyber attack

EasyPark says ‘hashed versions of passwords’ were also stolen in the December cyber attack. The company does not report which hash was used or how many customers had passwords stolen. The company says it is contacting affected customers.

“Our analysis confirms that hashed versions of passwords were also part of the data breach,” EasyPark writes in an update. The company says that passwords for all affected customers were reset on December 10, when the data breach was discovered. Customers who also used the password for other services are advised to change this password.

EasyPark says it will contact customers whose hashed password has been leaked via email, text message or push notification. The company does not say when this will happen; the previous communication about the data breach was gradual and lasted several weeks. In addition to EasyPark customers, Parkmobile customers may also have been affected by the data breach. The leak was in the EasyPark self-service web portal.

The company reported the data breach on December 14. The leak was part of a cyber attack that took place on December 10. In addition to hashed passwords, names, telephone numbers, addresses, e-mail addresses and ‘single digits of IBAN or credit card numbers’ were also viewed. At the time, the company spoke of ‘non-sensitive data’.