Supply chain
⛓ Supply Chain
City of Saint John Third-Party Breach (December 2018)
Primary Source ↗Incident Details
As many as 6,000 people may be affected by data breach in Saint John parking ticket system. The third-party software product Click2Gov, run by CentralSquare Technologies, was hacked. As many as 6,000 people in Saint John, N.B., could have had their personal information exposed, an analyst group said as the city announced it was one of dozens of municipalities affected by a data breach to its online parking ticket payment system. The city said it learned about a breach to the third-party software product Click2Gov, run by CentralSquare Technologies. . The product gives customers the option to pay parking tickets through the city’s website. Third-party company: Click2Gov.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Click2Gov
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2018-12-01 Breach occurred
- 2018-12-23 Publicly disclosed