Parking ticket data breach for tens of thousands
According to Sky News, the company called PaymyPCN.net, which has collected penalty charges for two decades has a direct link to the Driver and Vehicle Licensing Agency (DVLA) database, which means people who shouldn't be looking, can see drivers' names and addresses.
Not only that, there's public access to the content of emails that are appealing charges and photos of drivers and the cars. In addition to all that, this database allows the aforementioned photos to be uploaded and deleted, which is just magic.
How did this all come about? Well, a link to all that lovely data was published on Twitter by Michael Green after a private parking firm sent it to someone in error.
Green said: "I am not surprised by this. The DVLA claims to have safeguards in place to ensure drivers' details are safe but these only exist as media soundbites. Our campaign challengethefine.com aims to get people compensated for parking data breaches. Despite the RAC Foundation questioning the legality of these charges the DVLA still passes millions of details on to private firms."
Of course, this is the DVLA that have come under heavy fire for their collective failure to vet and audit the companies in which they are prepared to sell the names and addresses of motorists, so this latest news isn't a shock at all. This is also the same DVLA who have been acting unlawfully when it comes to losing your letters that you've sent them (and here's what you can do if the DVLA say they've lost your letter).
A DVLA spokeswoman said: "This is not a DVLA error. We take our duty to safeguard data very seriously and we will not compromise data security. DVLA does not hold or provide data such as photographs, emails and phone numbers to private parking companies."
As for PayMyPCN - if you want to get in touch with them to see about data breaches, here's the number to call and their email: Tel: 03450 737 209, [email protected]