HACKERS BREACH CLICK2GOV SOFTWARE TO STEAL THOUSANDS OF CREDIT CARD RECORDS

SOURCE: FORTUNE.COM

By  JEFF JOHN ROBERTS

December 18, 2018

Paying parking tickets or municipal water taxes is never fun—and it’s even worse when hackers have compromised your town’s payment system. Yet, that’s what happened in dozens of towns across the U.S. where cyber crooks have made off with the personal data of nearly 300,000 people.

Security research firm Gemini Advisory published a report Tuesday that provides new details on how vulnerabilities in Click2Gov, a widely used type of government payment software, has affected towns from Oceanside, Calif. to Sarasota, Fla.

The vulnerability has let hackers get onto the payment networks and steal credit card and debit card data when citizens use town websites to pay fines, taxes, and permits.

Reports

 of vulnerabilities in Click2Gov first surfaced in 2017 and, in September, cyber security giant FireEye confirmed the attacks were a nationwide problem.

The new Gemini report provides additional details about the extent of the hacks, and what the crooks are doing with the data. According to the firm, at least 294,929 payment records have been compromised in 46 U.S. cities, while criminals have earned $1.7 million selling the data on the dark web—typically for $10 per record.

Gemini’s Director of Research, Stas Alforov, told Fortune that Click2Gov has worked with many of the affected towns to patch the software, and that the breaches have arisen in part because of a lack of sophistication on the part of municipal IT workers.

The company that licenses the Click2Gov software, known as CentralSquare Technologies, did not immediately respond to a request for comments about the breach.

For the citizens using Click2Gov to honor their civic obligations, the breaches will not likely result in a financial loss since banks and credit card companies typically foot the bill in the case of stolen data. But the incidents do mean all of the aggravations that go with identity theft, including the need to replace their cards and possible damage to their credit scores.

Gemini’s Alforov says that many of the towns have addressed the Click2Gov vulnerabilities, but others have not, meaning the data exfiltration is ongoing.

Alforov added that the hackers behind the breaches do not appear to be particularly sophisticated, but that they have nonetheless figured out how to profit from the weak security of local governments.

Gemini was able to identify the affected municipalities by examining the addresses related to the stolen cards. Other affected towns include Laredo, Texas, Topeko, Kans. and Medford, Ore. A full list is available here.

Views: 20

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

Latest Activity

Marklar's Ghost favorited Modern Feudal Serf's blog post Migrants :: Naive Political Suckers — Bad Move!
5 minutes ago
Marklar's Ghost commented on Less Prone's blog post Students threatened to be fined for refusing to watch a homoerotic movie in Kokkola Finland
""Keep it greasy so it'll go down easy.""
8 minutes ago
Marklar's Ghost commented on Doc Vega's blog post Income Tax Really? And The Illusion You've Been Fed!
"1. Federal Reserve 2. Income Tax 3. The commerce clause 4. Two party fake elections Need I really say more."
11 minutes ago
Marklar's Ghost replied to dogitydog's discussion Why Is This Being Celebrated?
"Apparently old meat is tenderized, young meat is genderized."
22 minutes ago
Diana commented on Old Denmark's video
Thumbnail

YELLOW VESTED AMERICAN TELLS OFF PRO ILLEGAL ALIEN LA COUNTY SHERIFF ALEX VILLANUEVA

"The Supreme Court has said that police have no obligation to protect citizens beyond that which the police themselves decide, either individually or at the departmental level.  So there you have it, the Sheriff has made his decision. "
26 minutes ago
Marklar's Ghost replied to Chris of the family Masters's discussion Alert to all Americans: Prepare for emergency action in the 3D world… the orchestrated assault on your mind, your country and your president is approaching its final chapter
"The request for a link to the 3d world was just a joke Chris."
29 minutes ago
Diana favorited Old Denmark's video
36 minutes ago
Boris posted a video
44 minutes ago
Diana posted photos
47 minutes ago
Chris of the family Masters commented on Doc Vega's blog post Income Tax Really? And The Illusion You've Been Fed!
"'Income' Tax- "income is a profit derived from operating business" Wage earners, although the people, have been turned into corporations, e.g JOHN BROWN. It's been diabolical scam, working due to the widespread…"
1 hour ago
Old Denmark posted a video
1 hour ago
Chris of the family Masters favorited Doc Vega's blog post Income Tax Really? And The Illusion You've Been Fed!
1 hour ago
Chris of the family Masters replied to Chris of the family Masters's discussion Alert to all Americans: Prepare for emergency action in the 3D world… the orchestrated assault on your mind, your country and your president is approaching its final chapter
2 hours ago
Diana favorited Doc Vega's blog post Income Tax Really? And The Illusion You've Been Fed!
3 hours ago
Diana posted videos
3 hours ago
Marklar's Ghost replied to Chris of the family Masters's discussion Alert to all Americans: Prepare for emergency action in the 3D world… the orchestrated assault on your mind, your country and your president is approaching its final chapter
"Could you please provide a link to this 3D world of which yo speak?"
3 hours ago

Please remember this website is supported by your donations...

© 2019   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2015 - all rights reserved. unless otherwise noted