ATLANTA -- Park 'N Fly Inc. announced Tuesday that a its e-commerce website suffered a security breach, making payment card data information vulnerable to hackers.
In Portland, the firm has contracted with several shuttle companies including AirPark parking. On Thursday, AirPark told KGW they dropped their contract with Park 'N Fly due to the breach.
The Atlanta-based offsite airport parking company said while the investigation is ongoing, it determined the security of some data from certain payment cards used to make reservations through Park 'N Fly's e-commerce website is at risk.
The data potentially at risk includes the card number, cardholder's name and billing address, card expiration date and the CVV code on the back of the card. Other loyalty customer data potentially at risk includes email addresses, Park 'N Fly passwords and telephone numbers.
One victim told KGW his information was stolen, but he didn't realize it was due to the Park 'N Fly breach until he saw this report.
"They were using it for car ride service in New York City, in Brooklyn, New York then another was for Domino's pizza in Brooklyn New York, about 80 or 70 dollars' worth of pizza," Keith Biggs said. "I was pretty ticked off because I was afraid it wasn't just me. But then the other thought was, where else? Is there any other accounts? How many people got breached?"
Ken Westin, a security analyst with Tripwire in Portland, suggests changing card numbers several times a year.
"People said I was paranoid but now people are kinda wondering, 'hey, maybe that's not such a bad idea,'" he told KGW.
Park 'N Fly said the data breach has been controlled and it is working with third-party data forensics experts to assist with its investigation.
Park 'N Fly encouraged customers to take steps to protect their identity and financial information. As the investigation continues, and out of an abundance of caution, Park 'N Fly also is offering identity monitoring and identity protection services to potentially affected customers, free of charge for the next 12 months.
Park 'N Fly customers can visit www.pnf.com/security-update to learn more about this data security event and the support and services being provided.
