HACKERS BREACH CLICK2GOV SOFTWARE TO STEAL THOUSANDS OF CREDIT CARD RECORDS

SOURCE: FORTUNE.COM

By  JEFF JOHN ROBERTS

December 18, 2018

Paying parking tickets or municipal water taxes is never fun—and it’s even worse when hackers have compromised your town’s payment system. Yet, that’s what happened in dozens of towns across the U.S. where cyber crooks have made off with the personal data of nearly 300,000 people.

Security research firm Gemini Advisory published a report Tuesday that provides new details on how vulnerabilities in Click2Gov, a widely used type of government payment software, has affected towns from Oceanside, Calif. to Sarasota, Fla.

The vulnerability has let hackers get onto the payment networks and steal credit card and debit card data when citizens use town websites to pay fines, taxes, and permits.

Reports

 of vulnerabilities in Click2Gov first surfaced in 2017 and, in September, cyber security giant FireEye confirmed the attacks were a nationwide problem.

The new Gemini report provides additional details about the extent of the hacks, and what the crooks are doing with the data. According to the firm, at least 294,929 payment records have been compromised in 46 U.S. cities, while criminals have earned $1.7 million selling the data on the dark web—typically for $10 per record.

Gemini’s Director of Research, Stas Alforov, told Fortune that Click2Gov has worked with many of the affected towns to patch the software, and that the breaches have arisen in part because of a lack of sophistication on the part of municipal IT workers.

The company that licenses the Click2Gov software, known as CentralSquare Technologies, did not immediately respond to a request for comments about the breach.

For the citizens using Click2Gov to honor their civic obligations, the breaches will not likely result in a financial loss since banks and credit card companies typically foot the bill in the case of stolen data. But the incidents do mean all of the aggravations that go with identity theft, including the need to replace their cards and possible damage to their credit scores.

Gemini’s Alforov says that many of the towns have addressed the Click2Gov vulnerabilities, but others have not, meaning the data exfiltration is ongoing.

Alforov added that the hackers behind the breaches do not appear to be particularly sophisticated, but that they have nonetheless figured out how to profit from the weak security of local governments.

Gemini was able to identify the affected municipalities by examining the addresses related to the stolen cards. Other affected towns include Laredo, Texas, Topeko, Kans. and Medford, Ore. A full list is available here.

Views: 52

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega posted a blog post

The Draconian Show

Sometimes I talk to my invisible friend, IkeHe comes from another dimension when magnetic fields…See More
yesterday
tjdavis posted a blog post
Thursday
Doc Vega posted a blog post
Wednesday
Doc Vega posted blog posts
Tuesday
Doc Vega posted blog posts
Monday
Doc Vega favorited tjdavis's photo
Jun 22
Doc Vega commented on tjdavis's photo
Thumbnail

Game Night

"Ha! Good one!"
Jun 22
Doc Vega commented on FREEDOMROX's blog post MRNA VACCINES: Question
"Listen man I know where you're at but back in October of 2023 thru December of 2023 for months…"
Jun 22
tjdavis posted a video

Architecton | Official Trailer HD | A24

SUBSCRIBE: http://bit.ly/A24subscribeWritten and directed by Victor Kossakovsky and starring Michele De Lucchi. ARCHITECTON – Coming Soon RELEASE DATE: Comin...
Jun 22
tjdavis posted photos
Jun 22
tjdavis posted a blog post
Jun 21
Burbia posted a video

Europe Will Not Survive

The hubris.All things Archaix at www.archaix.com
Jun 21
FREEDOMROX posted a video
Jun 21
Burbia commented on tjdavis's blog post Track AIPAC
Jun 20
rlionhearted_3 commented on Doc Vega's blog post Latest Details on Missile Exchanges Between Iran and Israel
"May get really ugly over there?"
Jun 20
Doc Vega posted a blog post

Latest Details on Missile Exchanges Between Iran and Israel

Latest information about the air attacks between Israel and Iran as the US moves another carrier…See More
Jun 19
tjdavis favorited Less Prone's video
Jun 19
tjdavis posted a blog post
Jun 19
cheeki kea replied to cheeki kea's discussion Tartaria
"Some interesting information has come to light ( from the renaissance period ) which explains that…"
Jun 19
Sandy posted a video
Jun 19

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted