Europe’s Largest Parking App Operator Falls Victim to Data Breach

EasyPark Group, the largest operator of parking apps in Europe, has recently disclosed a significant security breach to information regulators in the EU and UK. This breach resulted in the unauthorized access and theft of customer data, including names, phone numbers, addresses, email addresses, and partial credit card numbers. Despite the seriousness of the breach, the company has assured the public that its parking data remains secure and has not been compromised.

The exact number of affected users has not been disclosed by the company; however, it has been revealed that 950 RingGo users in the UK were impacted. Additionally, a spokesperson for EasyPark Group has stated that the majority of affected users are under the EasyPark brand in Europe, indicating that the personal information of thousands of customers may have been compromised.

The recent cyber-attack on EasyPark Group highlights the trend of increasing centralization in the parking services industry. Traditional parking meters and attendants are being gradually replaced by apps, websites, and automated phone lines, which bring both benefits and risks. While the use of machines lowers operational costs and eliminates the need for personal data to complete transactions, the central collection of location data raises concerns about potential misuse for tracking individuals.

Despite this setback, EasyPark Group remains a significant player in the parking app industry and has the broadest coverage in Europe. The company’s portfolio includes popular brands such as ParkMobile, RingGo, and Park-line, with apps operating in over 4,000 cities across 23 countries. This extensive reach extends to the US, Australia, New Zealand, and various European nations, establishing EasyPark Group as a prominent force in the global parking app landscape.

Under the ownership of private equity investors Vitruvian Partners and Verdane, EasyPark Group has taken strategic steps to solidify its position in the industry. The company’s acquisition from automotive giants BMW and Daimler in 2021 paved the way for its continued expansion and influence in the market. Despite facing competition from entities like PayByPhone and JustPark in Europe, as well as ParkWhiz and SpotHero in the US, EasyPark Group is aggressively pursuing market dominance and expansion, often at the cost of financial losses incurred by aggressive acquisition strategies.

Despite the breach affecting a portion of its users, EasyPark Group has assured that its ParkMobile brand, which has 50 million users in the US, remains unaffected. While integration with EasyPark technology led to the exposure of RingGo users, the company clarified that the RingGo platform itself was not breached.

In response to the breach, EasyPark Group promptly informed affected customers and regulatory authorities, including Sweden’s privacy regulator as the lead authority for the EU, the UK’s Information Commissioner’s Office, and the Swiss data regulator. The company has also reassured customers that while a portion of their IBAN or credit card number was compromised, the stolen data cannot be used to make payments. However, it cautioned users to remain vigilant against phishing attempts, where cyber attackers exploit stolen information to deceive individuals into disclosing financial details.

As the investigation into the breach continues, EasyPark Group remains committed to addressing the aftermath of this incident and reinforcing its security measures to safeguard customer data. The company’s proactive approach in reporting the breach and providing transparent communication reflects its dedication to maintaining trust and integrity within the industry.