Hackers Breach Dozens of Local Government Payment Portals to Steal Credit Card Data

[InfoSec News <alerts () infosecnews org>]

http://fortune.com/2018/12/18/click2gov-local-government-portals-hackers-credit-card-breach/

By Jeff John Roberts
Fortune
December 18, 2018

Paying parking tickets or municipal water taxes is never fun -- and it's 
even worse when hackers have compromised your town's payment system. Yet, 
that's what happened in dozens of towns across the U.S. where cyber crooks 
have made off with the personal data of nearly 300,000 people.

Security research firm Gemini Advisory published a report Tuesday that 
provides new details on how vulnerabilities in Click2Gov, a widely used 
type of government payment software, has affected towns from Oceanside, 
Calif. to Sarasota, Fla.

The vulnerability has let hackers get onto the payment networks and steal 
credit card and debit card data when citizens use town websites to pay 
fines, taxes, and permits.

Reports of vulnerabilities in Click2Gov first surfaced in 2017 and, in 
September, cyber security giant FireEye confirmed the attacks were a 
nationwide problem.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_