Supply chain ⛓ Supply Chain

City of Saint John Third-Party Breach (December 2018)

📅 2018-12-01 🏢 Click2Gov
Primary Source ↗

Incident Details

As many as 6,000 people may be affected by data breach in Saint John parking ticket system. The third-party software product Click2Gov, run by CentralSquare Technologies, was hacked. As many as 6,000 people in Saint John, N.B., could have had their personal information exposed, an analyst group said as the city announced it was one of dozens of municipalities affected by a data breach to its online parking ticket payment system. The city said it learned about a breach to the third-party software product Click2Gov, run by CentralSquare Technologies. . The product gives customers the option to pay parking tickets through the city’s website. Third-party company: Click2Gov.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Click2Gov
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2018-12-01 Breach occurred
  2. 2018-12-23 Publicly disclosed