Supply chain ⛓ Supply Chain

City of Bakersfield Third-Party Breach (November 2018)

📅 2018-11-01 🏢 Click2Gov
Primary Source ↗

Incident Details

City of Bakersfield announces data breach from hacked Click2Gov system. The city of Bakersfield has reported that a “cyber-security incident” may have compromised the personal and financial information of those who used the city’s Click2Gov online payment processor. In a news release sent this afternoon, the city said it was notified that payment cards used legitimately through Click2Gov were later detected to have been used in fraudulent activity. Javascript is required for you to be able to read premium content. Please enable it in your browser settings. Third-party company: Click2Gov.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Click2Gov
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2018-11-01 Breach occurred
  2. 2018-11-12 Publicly disclosed