Datapark Data Security Incident
We are strongly committed to protecting our customers’ information and strive to let you know about security concerns as soon as possible. This is an update on the facts regarding a data security event and the steps that we have taken to remedy the situation and prevent a recurrence.
In late October 2014, HUB Parking Technology learned that a limited set of Datapark customers’ servers had been subject to unauthorized access, and notified affected customers. A particular user account that Datapark utilized to remotely access and service those servers was compromised and then apparently used to infect them with malicious software (“malware”) known as the “Backoff Point-of-Sale Malware.” Similar to that seen in other payment card-related breaches, this malware can be used to collect payment card numbers while they are being processed and then send them to a remote location. As soon as we became aware of it, we immediately took steps to neutralize the situation and prevent further unauthorized access.
Since October, HUB Parking Technology has worked closely with affected Datapark customers, their technical teams, and some independent computer forensics investigators to ensure elimination of the malware. We are also cooperating with the payment card companies and law enforcement.
The remote access issues have been remedied, the security compromise has been resolved and we have further updated and implemented our security processes and procedures to provide our customers with the secure, reliable method of handling payment card transactions for their parking patrons that they expect and deserve. Datapark payment applications are, and have been, compliant with PCI security standards. Please see our Validated Payment Application listings, under the Payment Application Data Security Standard (PA-DSS), at https://www.pcisecuritystandards.org/approved_companies_providers/validated_payment_applications.php?agree=true
HUB USA’s General Manager and CEO Robert Kempton said: “Protecting the privacy of our customers’ information is very important to us, and we regret any inconvenience that this incident may have caused”.
Should you have any questions or concerns, please do not hesitate to contact us at security.usa@hubparking.com
About HUB Parking Technology
HUB Parking Technology is the FAAC Group Business Unit that develops, manufactures, installs and provides after-sales services for Parking Revenue Control Systems branded ZEAG, DATAPARK and FAAC. Through its local Group companies and distributors, it is represented in all five continents and more specifically in North & South America, Europe, Africa, the Middle East, Asia and Australia. For more information about HUB Parking Technology, visit: www.hubparking.com
About FAAC Group
FAAC Group is a privately owned multinational Group, a pioneer in the automated systems industry for the control of pedestrian and vehicle access in both residential and commercial applications. The Group activity is developed through three Business Units: Access Automation, Access Control and Parking Revenue Control Systems. FAAC Group was founded in 1965 and has today become an international industrial Group with over 1,800 employees, 16 production plants and 32 foreign subsidiary companies throughout the world. The Group is based in Zola Predosa, Bologna, Italy. For more information about FAAC Group, visit: www.faacgroup.com
Press Contact:
Ilaria Riva
Marketing and Communication Manager
HUB Parking Technology
Tel: +39 051 6172649
ilaria.riva@hubparking.com