Loading story…
ParkMobile, a widely used mobile and web parking payments platform based in Atlanta, reached a settlement following a class action lawsuit stemming from a significant data breach in 2021 that affected approximately 22 million users. The breach resulted in the theft of sensitive user information, including names, email addresses, phone numbers, mailing addresses, license plate numbers, vehicle information, and bcrypt-hashed passwords. Notably, payment information was not compromised in the incident. The stolen data was subsequently leaked on a hacking forum, making it accessible to anyone who downloaded the database. In response to the breach and ensuing legal action, ParkMobile agreed to a $32.8 million settlement, though the company denied any wrongdoing or liability as part of the agreement. Affected users who filed claims were eligible to receive up to $25 in cash, while those who did not file claims received an alternative compensation in the form of a $1 in-app credit. This credit is only applicable to ParkMobile service fees, not actual parking fees, and must be redeemed in $0.25 increments, requiring manual entry into the user's account. The credit is also subject to an expiration date, with users needing to utilize it by October 8, 2026. ParkMobile communicated these details to affected users via email, which some recipients initially questioned for legitimacy due to its unusual terms. The company also issued a separate advisory warning customers about an ongoing smishing campaign, urging vigilance against phishing attempts. The settlement and its terms have drawn criticism and raised eyebrows online, particularly due to the low compensation amount and the restrictions on how the credit can be used. Despite the settlement, ParkMobile continues to deny all accusations of negligence or failure to protect user data. The incident highlights the ongoing challenges companies face in securing user data and the complexities of compensating victims after large-scale breaches. The breach and subsequent settlement have prompted discussions about the adequacy of legal remedies and user compensation in the wake of major cybersecurity incidents. The case also underscores the importance of robust data protection measures and transparent communication with affected users. ParkMobile's experience serves as a cautionary tale for organizations handling large volumes of sensitive customer information. The company’s response, including the settlement structure and user notifications, reflects broader industry trends in addressing the aftermath of data breaches. The incident remains a significant example of the legal and reputational risks associated with cybersecurity failures in the digital services sector.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Follow-up reporting highlighted that part of the ParkMobile settlement compensation involved credit with an expiration condition, drawing attention to limitations in the relief offered to victims. This clarified the practical impact of the settlement for affected users.
By early October 2025, ParkMobile had agreed to resolve litigation over the 2021 breach through a settlement offering compensation to affected users. Reports said eligible claimants could receive about $1 each or account credit, depending on the settlement terms.
In 2021, ParkMobile disclosed a data breach that impacted approximately 22 million users. The incident became the basis for later legal claims and a class-action settlement.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
zdnet.com
Open sourcescworld.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Comcast agreed to pay **$117.5M** to settle a class action tied to a large-scale breach disclosed in late 2023 that potentially affected **31M+** people. Comcast attributed the intrusion to **CitrixBleed** (Citrix NetScaler ADC/Gateway), a vulnerability that can enable **session hijacking** and credential theft; researchers warned stolen session tokens could remain valid even after patching, extending attacker access. The proposed settlement (preliminarily approved) provides reimbursement for documented losses (up to **$10,000** per person) and compensation for time spent responding, while Comcast denies wrongdoing. Separately, Google agreed to pay **$135M** to settle Android users’ claims that devices transmitted data to Google servers over **cellular networks** in the background without meaningful consent, with individual payouts capped (reported up to **$100**) and additional **injunctive relief** requiring clearer disclosures and express consent during setup. Two dermatology practices also reached settlements over cybersecurity incidents exposing patient data; one New Jersey practice reported unauthorized network access spanning **Dec 2023–Mar 2024** and exposure of **PHI/PII** (including SSNs and treatment/insurance data) affecting **373,630** individuals, offering cash benefits plus credit monitoring/identity protection while denying liability.
Jun 29, 2026
Heritage Provider Network, one of the largest physician-owned healthcare networks in the United States, and nine of its affiliated physician practices have agreed to pay nearly $50 million to settle consolidated class action lawsuits stemming from a major ransomware and data theft incident in December 2022. The breach affected more than 3.4 million current and former patients, whose sensitive personal and medical information was compromised. The impacted practices include Regal Medical Group, Lakeside Medical Organization, Greater Covina Medical Group, Affiliated Doctors of Orange County Medical Group, Arizona Health Advantage, AZPC Clinics, Community Surgery Center of Glendale, Pacific Family Hospice, and Valley’s Best Hospice. Plaintiffs in the lawsuits alleged that the compromised data, which included names, Social Security numbers, addresses, dates of birth, and medical information, was leaked on the dark web. Notices about the breach were sent to affected individuals in early 2023, alerting them to the exposure of their information. The $49.9 million settlement provides each class member with three years of complimentary identity and theft monitoring services. Eligible class members who submit valid claims can receive cash payments of up to $10,000 for documented fraud or out-of-pocket expenses related to the breach. The settlement aims to address the alleged failure of Heritage Provider Network and its affiliates to adequately protect patient data, as detailed in the class action complaints. The legal resolution covers an estimated 3,413,000 individuals who received notification of the breach. The settlement was reached after plaintiffs claimed that the defendants’ security measures were insufficient to prevent the ransomware attack and subsequent data theft. The incident has highlighted the ongoing risks faced by healthcare organizations in protecting sensitive patient information from cybercriminals. The settlement also underscores the significant financial and reputational consequences that can result from large-scale healthcare data breaches. Heritage Provider Network and its affiliates have not admitted wrongdoing but agreed to the settlement to resolve the litigation. The case serves as a reminder for healthcare providers to continually assess and strengthen their cybersecurity posture to mitigate the risk of future incidents. The settlement is one of the largest in recent years for a healthcare data breach, reflecting the scale and impact of the incident. Affected patients are encouraged to review the settlement terms and submit claims if eligible.
Jun 29, 2026
Marlboro-Chesterfield Pathology has agreed to settle a class action lawsuit tied to a January 2025 ransomware attack attributed to the **SafePay** group, after attackers gained unauthorized access to its network and obtained files containing sensitive patient information. The pathology provider reported to the U.S. Department of Health and Human Services Office for Civil Rights that **235,911 individuals** were affected, with compromised data including names, dates of birth, Social Security numbers, and protected health information. The proposed settlement, which received preliminary court approval, provides reimbursement of documented fraud- or identity-theft-related losses of up to **$1,000** per class member, a **$10** alternative cash payment for certain people whose Social Security numbers were exposed, and one year of credit monitoring and identity theft protection. Marlboro-Chesterfield Pathology denied wrongdoing and liability, and no ransom payment details were disclosed, while a final fairness hearing is scheduled for **October 12, 2026**.
Jul 16, 2026