Ransomware gang claims it breached Canada’s Park’N Fly airport shuttle service, 1 million records compromised

Ransomware group Ransomhub today claimed responsibility for a data breach at Park’N Fly, the parking and shuttle service for several Canadian airports.

Park’N Fly on August 27, 2024 notified customers of a July data breach that compromised 1 million customers’ contact information, Aeroplan, and CAA number. The company says no financial or payment card information was accessed by attackers. The impacted systems were restored in five days.

The post on RansomHub’s leak site indicates ransom negotiations with Park’N Fly broke down, and RansomHub is now instead trying to sell the data to a third party.

“After 3 weeks of negotiations with a stupid representative, it seems that they don’t care about their customers, and now we are selling this target data,” RansomHub’s post reads.

Park’N Fly has not confirmed that RansomHub was responsible for the breach. No other group has claimed the breach of time of writing.

We don’t yet know how much RansomHub demanded or how attackers breached Park’N Fly’s network. Comparitech contacted Park’N Fly for comment and will update this article if it responds.

Who is RansomHub?

RansomHub employs a ransomware-as-a-service model and has recently been linked to the now-defunct ransomware group, Knight. RansomHub has grown in notoriety in recent months, being behind some of the biggest ransomware attacks this year so far. These include attacks on Rite Aid, the auction house Christie’s, Florida Department of Health, Change Healthcare, and Frontier Communications.

Comparitech researchers recorded 38 confirmed ransomware attacks claimed by RansomHub so far in 2024, affecting 4.7 million records. The group claimed another 196 attacks that haven’t been confirmed by targets.

RansomHub’s other recent targets include Halliburton, Swinburne University of Technology, and Planned Parenthood of Montana.

About Park’N Fly

Park’N Fly is the biggest provider of off-airport parking in Canada. Customers pay to park and take a shuttle to and from the airport. It operates in seven locations: Vancouver, Edmonton, Winnipeg, Toronto, Ottawa, Montreal, and Halifax.