INDIANAPOLIS–Government Payment Service, Inc., which is used by thousands of U.S. state and local governments to accept online payments for everything from traffic citations and licensing fees to bail payments and court-ordered fines, has leaked more than 14-million customer records dating back at least six years, including names, addresses, phone numbers and the last four digits of the payer’s credit card, KrebsOnSecurity reported.
GovPayNet, doing business online as GovPayNow.com, serves approximately 2,300 government agencies in 35 states. GovPayNow.com displays an online receipt when citizens use it to settle state and local government fees and fines via the site. Until this past weekend it was possible to view millions of customer records simply by altering digits in the web address displayed by each receipt, Krebs stated.
Last week, KrebsOnSecurity alerted GovPayNet that its site was exposing at least 14 million customer receipts dating back to 2012. Two days later, the company said it had addressed “a potential issue,” Krebs reported.