West Virginia University Transportation and Parking was recently notified by ParkMobile of a cybersecurity incident in late March linked to a vulnerability in a third-party software used by the company.
ParkMobile launched an investigation to address the incident and released the following information:
The investigation confirmed that no credit card information was accessed.
No data related to a user’s parking transaction history was accessed.
Only basic user information was accessed. This includes license plate numbers, as well as email addresses, phone numbers and vehicle nicknames, if provided by the user. In a small percentage of cases, mailing addresses were also affected.
Encrypted passwords were accessed, but not the encryption keys required to read them. ParkMobile protects user passwords by encrypting them with advanced hashing and salting technologies.
ParkMobile does not collect Social Security numbers, driver’s license numbers or dates of birth.
Information Technology Services (ITS) encourages ParkMobile users at WVU to follow the vendor’s guidance and change their password in the system.
Visit the ParkMobile website for more information. If you have questions, you can contact the Park Mobile Member Services Help Desk (available 24/7) at 877-727-5457. You also can submit a request on the site or chat with Member Services.