Following our recent security notice to users, we want to provide important additional context regarding how the unauthorized access occurred.
Between September 5 and September 13, 2026, an unauthorized third party used compromised account credentials associated with SpotAngels’ project to access and export certain SpotAngels data stored with our analytics provider, Amplitude.
Depending on your use of SpotAngels and your device permissions, the information may have included your name, email address, IP address, device information, app preferences, location coordinates, and parking-related app activity. No financial information was exposed.
To be clear, this incident was isolated strictly to SpotAngels’ account credentials and was not the result of any compromise, breach, or security failure of Amplitude’s platform, infrastructure, or network.
Amplitude’s investigation confirmed that its underlying systems were not compromised in connection with this incident. Amplitude assisted SpotAngels in investigating the activity and rotating the affected credentials.
If you have questions or concerns, please contact us at support@spotangels.com