Parking Management Company hacked and my personal data leaked

ritwolf

A couple of months ago I received a parking charge from the company that manages the parking space in the building I live.

This week I received an email from them to click on a link to access my payment-related documents. As the link wasn't working, I replied back asking for a working link and they confirmed the email was hacked.

Now I'm getting emails from other accounts saying that they are the same parking management company and ask me to access some websites to get info. related to me, which I'm not going to click on.

I'm quite concerned about the leak as the parking management company has my address, personal mobile number and personal email.

Is there anything or any authority I should inform? Do I have any rights to ask them to not to hold my data? What if these leaked data is misused (my address, phone number, etc.)?

I'm quite concerned about safety and don't know if I should go to the police.

D_P_Dance

Try here

https://www.google.com/search?q=breach+of+data+protection+uk&oq=breach+of++data&aqs=chrome.2.69i57j0l9.10976j1j15&sourceid=chrome&ie=UTF-8

ritwolf

Thank you, I will start by changing passwords, but they still have personal details that I can't change.

I will look into the link above, but if anyone knows for sure, can I report them? I don't know what authority can investigate if they protect data in a sensible manner.

KeithP

ritwolf said:

I will look into the link above, but if anyone knows for sure, can I report them?

Yes, @D_P_Dance knows for sure and has provided you with the answers.

There are useful links there such as:
How do I report a data protection breach UK?
Can I sue for breach of Data Protection Act?
Data protection: Make a complaint - GOV.UK
Report a breach | ICO
and many more.

Coupon-mad

Report this to their Trade Body and complain to the parking firm about their data system causing this harassment and ask what they will do about it.  Also, send a complaint letter to the Managing Agents or Housing Association who were stupid enough to sign a contract with the PPC,

Which PPC?

ritwolf

Parking Control Management (UK) Ltd:

https://www.parkingcontrolmanagement.co.uk/

Half_way

The entity who's systems were breached should have informed the ICO, have they done this?

Coupon-mad

Do a complaint to PCM first, asking them if they have reported the data breach to the Information Commissioner, the IPC, the DVLA and their client, the landowner, because you are about to report them to all of the above and your local MP.

Fruitcake

Give the scammers a week to respond then report them if they don't reply, or don't confirm they have reported themselves. (Confirm with the DVLA even if the scammers do say they have reported themselves.)


Complaint addresses for the DVLA and DVLA Kadoe team.

ccrt@dvla.gov.uk 

and

KADOEservice.support@dvla.gov.uk

Things to highlight to the DVLA.

From the DVLA KADOE contract: -

D1.1. The Parties shall comply with the requirements of the Data Protection Act 1998 ...

D1.9. If at any time the DVLA has any concerns that the Customer may have lost or misused Data ...

D2.3. The Customer shall comply with all the security requirements of the DVLA, ...

D2.4. The Customer shall notify the DVLA immediately of any breach of the security requirements of this Contract or any requirements of the DPA.

D3.2. Notwithstanding clause D3.1, if Malicious Software is found, the Parties shall co-operate to reduce the effect of the Malicious Software and, particularly if Malicious Software causes loss of operational efficiency or loss or corruption of Data, ...

D5.1. The Customer shall respect the confidentiality of the Data and shall not disclose it to any person, except in the following circumstances: ...

D10.1. The Customer shall notify the DVLA immediately of any losses or misuse ...

Half_way

A few  questions:
 if it is your space then why is a third party issuing parking charges to you to use something that is yours?
what does your please say about parking?
have you contacted the management company?  as principal they are jointly and severely liable for the actions of their agents (the parking company)

Le_Kirk

Half_way said:

A few  questions:
 if it is your space then why is a third party issuing parking charges to you to use something that is yours?
what does your please lease say about parking?
have you contacted the management company?  as principal they are jointly and severely jointly and severally liable for the actions of their agents (the parking company)

Couple of corrections in case OP wasn't aware