Click2Gov

Summary

In August 2019, payment portal Click2Gov was breached, exposing more than 20,000 payment records from eight cities in five states in the US. The stolen records were offered for sale on the Dark Web. Back in December 2018, Click2Gov suffered an even larger breach that impacted dozens of cities and municipalities in the US and Canada and exposed nearly 300,000 payment records. This incident generated over $1.9 million in profits for the threat actors. Many of the impacted organizations in the most recent breach were running up-to-date Click2Gov systems; therefore, it is advised for organizations to monitor their systems for malicious activity and indications of compromise. Gemini Advisory provides details of this incident in their article.