Incident · State breach notice (South Carolina Department of Consumer Affairs)
Preferred Parking data breach: card numbers of 72,912 customers, 61,335 of them in North Carolina
Compiled from public records. By the cisonews.net Desk.
The Preferred Parking data breach exposed the names and credit card numbers of 72,912 people, according to Indiana's breach report, which records a notice sent on August 14, 2026 and a breach date of June 7, 2026. The Charlotte company, which runs parking lots and garages across the Southeast, says an unauthorized actor got into its database on June 7 and June 8, 2026 and took files. The Charlotte Observer reported that 61,335 of the people affected live in North Carolina.
Entries like this one, in Wednesday’s docket
Wednesdays
Unsubscribe any time.
What happened in the Preferred Parking breach?
The letter says the company's investigation found that an unauthorized actor accessed its database on June 7 and June 8, 2026, and took certain files; on July 30, 2026 the company determined that those files held people's names and credit card numbers. It does not say how the actor got in. The company says it has added measures to improve the security of its network, without listing them.
| Date (2026) | What happened | Source |
|---|---|---|
| June 7 and 8 | Unauthorized actor accesses the database and takes files | Letter; Indiana report |
| July 30 | Company confirms the files held names and card numbers | Letter |
| August 14 | At least three states notified | Charlotte Observer; Indiana report |
From the day the company confirmed card data to the state notices took 15 days.
Was my credit card exposed in the Preferred Parking breach?
If you paid for parking with a card at a Preferred Parking location and got a letter, yes: the letter says your name and credit card number were in the files. The letter does not mention expiration dates or security codes. Its advice is to check card statements and, if a charge looks wrong, call the bank on the number on the back of the card. The letter offers no credit monitoring. The payment card breach notice guide compares this with other card breaches in the log.
How many people were affected, by state?
72,912 in total. The Charlotte Observer reported the breakdown from the states it checked:
| State | People affected | Reported by |
|---|---|---|
| North Carolina | 61,335 | Charlotte Observer (N.C. Attorney General's office) |
| South Carolina | 5,176 | Charlotte Observer |
| Massachusetts | 142 | Charlotte Observer |
| Indiana | 92 | Indiana report |
| Vermont | 11 | Charlotte Observer |
| All states | 72,912 | Indiana report; Charlotte Observer |
North Carolina accounts for 84 percent of the total. The company is based in Charlotte: the Observer, citing the company's website, put it at more than 240 locations across the Southeast, with more than 65 in the greater Charlotte area.
How do I contact Preferred Parking about the letter?
The letter's call line is 888-650-4906, Monday to Friday, 9:00 a.m. to 9:00 p.m. Eastern time. The pages that follow the letter in the South Carolina filing set out the standard steps: free credit reports, fraud alerts and credit freezes.
What the record leaves open
- How the unauthorized actor got into the database.
- Whether card expiration dates or security codes were also in the files.
- Which locations and which months of transactions the stolen card numbers came from.
How this disclosure's timing compares
Preferred Parking Service, LLC disclosed 15 days after the discovery date its notice gives. Across the 206 other state breach notices on cisonews.net that date discovery to the day, the median gap is 100 days.
Other transportation & logistics incidents on cisonews.net
- Uber Technologies, Inc., Breach notice, first disclosed November 10, 2026
- Caltrain, Breach notice, first disclosed November 3, 2026
- STS Aviation Group, Breach notice, first disclosed October 19, 2026; 54,027 affected in total (Indiana Attorney General)
- Yellow Corporation, Breach notice, first disclosed June 26, 2026; affected: 258,498 people (Oregon DOJ record)
- WestJet, an Alberta Partnership, Substitute breach notice, first disclosed September 29, 2025; affected: 1,200,000 people (Indiana and Oregon records)
Sources
- 2026-08-14 · APreferred Parking Service, consumer letter (filed with the South Carolina Department of Consumer Affairs), published August 14, 2026
- 2026-11-11 · AIndiana Attorney General, data breach year-to-date report 2026, published November 11, 2026
- 2026-08-25 · BThe Charlotte Observer: Preferred Parking data breach, published August 25, 2026
Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.
Entries like this one, in Wednesday’s docket
Wednesdays
Unsubscribe any time.