Travel & Transit Apps · Parking · Private litigation + Data breach
Parkmobile
Headline
The ParkMobile breach is fully settled and remains instructive because of who was exposed: a parking payment app operating in 500+ North American cities holds vehicle plate numbers tied to names, payment cards and…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The ParkMobile breach is fully settled and remains instructive because of who was exposed: a parking payment app operating in 500+ North American cities holds vehicle plate numbers tied to names, payment cards and precise parking locations and times. That combination is a vehicle movement history, and plate-to-identity linkage is exactly the join that automated licence plate reader networks otherwise have to work to achieve. Municipal parking is also functionally compulsory - in many cities the app is the only payment method at the meter.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
MAJOR CONFIRMED BREACH, SETTLEMENT REACHED: ParkMobile (operating in 500+ North American cities, one of the largest parking apps in the US) suffered a 2021 breach where attackers exploited a vulnerability in THIRD-PARTY SOFTWARE to access systems WITHOUT needing to crack password encryption directly — exposing email addresses, phone numbers, LICENSE PLATE NUMBERS, hashed passwords, and mailing addresses for over 20 MILLION USERS, with the data subsequently listed for sale on a Russian cybercrime forum. The resulting class action settled for a reported $32.8 MILLION total value with roughly 21 MILLION people eligible: a $9 million cash fund paying up to $25 per claimant, $2.5 million in security improvements and $1 app credits; the cash-claim deadline was March 5, 2025, and the final approval hearing was set for March 13, 2025 (Newsweek, Mar. 3, 2025); whether final approval was granted was not confirmed in sources reviewed as of Oct 2026 — the lawsuit specifically alleged ParkMobile's security fell short of FTC-recommended standards and called the company's privacy approach 'reckless, or at the very least, negligent,' given how well-documented similar third-party-software breach risks already were at the time.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy parkmobile.io/privacy-policy/ | Not fetched yet | NO (HTML only) |
| Terms of service parkmobile.io/terms-of-use/ | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.