“Park’N Fly discovered that an unauthorized third party accessed our network through remote VPN access.”
Attackers walked in with stolen VPN credentials on July 11 and left with names, addresses, emails, Aeroplan numbers and CAA numbers for about 1 million customers. The CEO wants customers to know the company is “taking all necessary steps.” A parking lot had no reason to keep a million frequent-flyer numbers on file. Customers now get to watch their Aeroplan accounts for the next hijack.