Incident: Parking Payment Machines Software Glitch Causes Financial Hardship in Worcester

Published Date: 2022-09-30

Postmortem Analysis
Timeline 1. The software failure incident happened in mid-September 2022 [Article 134147]. 2. The incident occurred during the last week of September 2022 [Article 134147].
System 1. Flowbird parking payment machines software upgrade - The software upgrade introduced a software bug that caused payments to be duplicated, leading to the overcharging of customers [134147, 132785].
Responsible Organization 1. Worcester city council [134147, 132785] 2. Parking contractor Flowbird [134147]
Impacted Organization 1. Drivers in Worcester, including Giselle Naylor, Andy Gynn, and Emma Pearson [134147, 132785]
Software Causes 1. The software glitch was caused by a bug introduced during a recent software upgrade by the parking contractor Flowbird, leading to duplicate payments being taken out of people's accounts [134147]. 2. The glitch was not the fault of Worcester city council but was due to a software bug in the recent software upgrade by Flowbird [134147].
Non-software Causes 1. The glitch with the car park payment machines led to drivers being charged multiple times for parking, draining their bank accounts [134147, 132785]. 2. The problem occurred after an upgrade to the machines by the company operating them [132785]. 3. The company's attempt to upgrade the software resulted in a serious problem [132785].
Impacts 1. Many drivers were left out of pocket, with some being charged multiple times for parking fees, leading to financial hardship for some individuals [134147, 132785]. 2. Over 1,500 people were estimated to have been overcharged due to the software glitch in the parking payment machines [134147]. 3. Some individuals reported being unable to pay bills, being left overdrawn, and facing unarranged overdrafts due to the repeated debits caused by the software failure [134147, 132785]. 4. Customers experienced inconvenience and stress, with one individual unable to access any of their accounts, impacting their holiday plans [134147, 132785]. 5. The software failure led to a loss of significant amounts of money for some individuals, with one person losing £610 in 122 transactions [132785]. 6. The council had to disable payment card options in council-run car parks, advising drivers to use cash or the RingGo app instead [134147]. 7. The software failure resulted in a breach of contract notice being issued to the parking contractor responsible for the glitch, indicating a breakdown in the service agreement [134147, 132785].
Preventions 1. Thorough testing of the software upgrade before implementation could have prevented the software failure incident [134147, 132785]. 2. Implementing proper monitoring and alert systems to quickly identify and address any anomalies or errors in the software could have helped prevent the incident [134147, 132785]. 3. Conducting a comprehensive risk assessment prior to deploying the software upgrade to identify potential issues and mitigate them proactively could have prevented the incident [134147, 132785].
Fixes 1. Implementing a fix for the software bug introduced during a recent software upgrade that caused the payments to be duplicated [Article 134147]. 2. Working with relevant teams to quickly address the software glitch and process automatic refunds for everyone who was wrongly charged [Article 134147]. 3. Fully refunding incorrect charges, including any banking charges incurred as a result of the software failure [Article 134147]. 4. Ensuring that bank card payments will be back up and running as soon as possible after resolving the software issue [Article 134147].
References 1. Worcester city council [Article 134147, Article 132785] 2. Flowbird Smart City UK [Article 134147]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident has happened again at one_organization: - The incident occurred at Worcester city council's parking payment machines due to a software glitch [134147]. - The council had previously identified that card payments were not being taken from individuals' bank accounts since about 29 August, leading to overcharging when the payments were eventually processed [134147]. - The council had declared the problem resolved, but unauthorised payments were still being debited, indicating a recurring issue [134147]. - Worcester council issued a contractual breach notice to its parking contractor Flowbird and mentioned reviewing arrangements with the company, suggesting a history of issues with the contractor's software upgrades [134147]. (b) The software failure incident has happened again at multiple_organization: - The incident affected numerous drivers in Worcester, with over 1,500 people estimated to have been overcharged due to the software glitch in the parking payment machines [134147]. - Various motorists reported being charged multiple times for parking fees, indicating a widespread issue with the software malfunction [134147]. - Customers who paid for parking using their bank cards rather than cash or the RingGo app were affected, showing a broader impact on individuals using card payments for parking [132785]. - The council leader mentioned that the company operating the machines had attempted a software upgrade that resulted in serious problems, implying a potential recurring issue with software upgrades across different organizations [132785].
Phase (Design/Operation) design, operation (a) The software failure incident in Worcester's parking payment machines was attributed to a software glitch caused by a recent software upgrade by the parking contractor Flowbird. This glitch led to duplicate payments being taken out of people's accounts, with some individuals being charged multiple times for parking fees they had already paid. The council identified that the issue arose during mid-September when card payments for parking sessions were not processed as expected after a system upgrade [134147]. (b) The operation-related contributing factors to the software failure incident involved customers using their bank cards for parking payments, which resulted in unauthorized and multiple charges due to the software glitch. The glitch affected customers who had previously paid for parking using their bank cards rather than cash or the RingGo app. This operation-related issue led to customers being overcharged and experiencing financial hardship as a result of the repeated debits from their accounts [132785].
Boundary (Internal/External) within_system, outside_system (a) within_system: The software failure incident in Worcester, where drivers were repeatedly debited by parking payment machines, was caused by a software glitch resulting from a software upgrade by the parking contractor Flowbird. The glitch led to duplicate payments being taken out of people's accounts, causing financial hardship to many individuals [134147, 132785]. (b) outside_system: The software failure incident was exacerbated by the fact that unauthorised payments were still being debited even after the council declared the problem resolved. This external factor of continued unauthorized debits from individuals' bank accounts contributed to the impact of the software failure incident [134147].
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident in Worcester, where drivers were repeatedly debited by parking payment machines, was primarily attributed to a software glitch caused by a software upgrade by the parking contractor Flowbird. The glitch resulted in unauthorised and duplicate payments being taken from individuals' bank accounts, leading to financial hardship for many affected individuals [134147, 132785]. (b) Human actions also played a role in the software failure incident. The council leader mentioned that the problems followed an upgrade to the machines, indicating that the decision to upgrade the software was a human action that led to the serious issues with the payment machines. Additionally, the company operating the machines was criticized for a poor response to the incident, suggesting that human actions in handling the situation contributed to the dissatisfaction and stress experienced by the affected individuals [132785].
Dimension (Hardware/Software) software (a) The software failure incident in Worcester, where drivers were overcharged for parking, was primarily attributed to a software issue rather than a hardware problem. The incident was caused by a software glitch introduced during a recent software upgrade by the parking contractor Flowbird [134147]. The software bug resulted in payments being duplicated, leading to multiple unauthorized charges on individuals' bank accounts [132785]. The company responsible for the parking machines had attempted a software upgrade that went wrong, causing serious problems with the payment processing [132785]. (b) The software failure incident was clearly identified as originating from software issues. The software bug introduced during the software upgrade led to the duplication of payments and unauthorized charges on individuals' bank accounts [134147]. The council and the parking contractor acknowledged that the problem was due to a software glitch and not a hardware issue [134147]. The software failure resulted in numerous drivers being overcharged and experiencing financial difficulties due to the repeated debits caused by the software glitch [132785].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident in Worcester related to the parking payment machines was non-malicious. The incident was attributed to a software glitch caused by a software upgrade by the parking contractor Flowbird [134147]. The company acknowledged that a software bug was introduced during the upgrade, leading to duplicated payments and financial hardships for affected individuals [134147]. The council and the company were working to fix the problem and ensure refunds for those wrongly charged [134147]. (b) The software failure incident was not malicious but rather a result of unintended consequences of a software upgrade, leading to duplicate payments and financial difficulties for users [134147]. The issue was described as a software glitch and not the fault of Worcester city council [134147]. The council and the company were focused on resolving the problem and providing refunds to those impacted by the error [134147].
Intent (Poor/Accidental Decisions) poor_decisions, accidental_decisions (a) The software failure incident in Worcester related to the parking payment machines was primarily due to poor decisions made during a software upgrade. The incident was caused by a software bug introduced during a recent software upgrade by the parking contractor Flowbird. This bug led to payments being duplicated, resulting in multiple unauthorized charges to individuals' bank accounts [134147]. The council identified that the issue arose after a software upgrade by Flowbird, which caused delayed payment files to be sent to the merchant service provider, leading to duplicate payments being taken from people's accounts [134147]. The council also issued Flowbird with a contractual breach notice due to the software glitch introduced during the upgrade [132785]. (b) Additionally, the software failure incident can also be attributed to accidental decisions or mistakes made during the software upgrade process. The council leader mentioned that the problems with the parking machines followed an upgrade to the software, indicating that the upgrade process had unintended consequences [132785]. Customers who had previously paid for parking using their bank cards were affected by the error, suggesting that the issue was not intentional but rather a result of unintended consequences of the software upgrade [132785]. The council pledged refunds to those affected by the incident, indicating that the errors were not deliberate but accidental [132785].
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident in Worcester, where drivers were overcharged multiple times for parking fees, was attributed to a software glitch caused by a software upgrade by the parking contractor Flowbird. The company acknowledged that a software bug was introduced during a recent software upgrade, leading to duplicated payments being taken from individuals' bank accounts [134147]. (b) The incident was described as an error with the payment machines that drained bank accounts, affecting numerous drivers in Worcester. The council leader mentioned that the problems followed an upgrade to the machines, indicating that the issue was accidental and not intentional [132785].
Duration temporary (a) The software failure incident in the articles appears to be temporary. The incident was caused by a software glitch introduced during a recent software upgrade by the parking contractor Flowbird. This glitch led to duplicate payments being taken out of people's accounts, with some individuals being charged multiple times for parking fees they had already paid. The council and Flowbird were working to fix the problem quickly and process automatic refunds for those affected. Card payment options were disabled across council-run car parks, and refunds were promised to be arranged within a week [134147, 132785].
Behaviour crash, omission, timing, value, other (a) crash: The software failure incident in Worcester involving the parking payment machines led to a crash where the system lost state and did not perform its intended functions. Drivers reported being repeatedly debited by the machines, with some experiencing multiple charges for a single parking transaction, leading to financial hardship [134147, 132785]. (b) omission: The software failure incident also involved omission, where the system omitted to perform its intended functions at instances. Some motorists were charged for parking they never used or were charged weeks after the actual parking event, indicating instances where the system failed to function correctly [132785]. (c) timing: The timing of the software failure incident was also a factor. The system was reported to have performed its intended functions incorrectly but at the wrong time, such as debiting bank accounts multiple times for a single parking session, causing financial distress to the affected individuals [134147, 132785]. (d) value: The software failure incident resulted in the system performing its intended functions incorrectly, leading to financial losses for the drivers. For example, one individual had £610 drained from their bank accounts due to erroneous transactions caused by the software glitch [132785]. (e) byzantine: There is no specific mention of the software failure incident exhibiting a byzantine behavior in the articles. (f) other: The software failure incident also led to other behaviors not covered by the options listed. This includes the system processing duplicate payments, causing unarranged overdrafts for individuals, and the disabling of payment card options in council-run car parks as a response to the incident [134147, 132785].

IoT System Layer

Layer Option Rationale
Perception processing_unit, embedded_software (a) sensor: The software failure incident in Worcester related to parking payment machines was not directly linked to a sensor error. The issue was primarily attributed to a software glitch introduced during a recent software upgrade by the parking contractor Flowbird [Article 134147]. (b) actuator: The incident did not involve an actuator error. The problem stemmed from a software bug introduced during a software upgrade, causing duplicate payments to be processed [Article 134147]. (c) processing_unit: The failure was primarily due to contributing factors introduced by a processing error. The software glitch, not the fault of Worcester city council, led to duplicate payments being taken out of people's accounts after a recent software upgrade by the parking contractor Flowbird [Article 134147]. (d) network_communication: The software failure incident was not directly related to a network communication error. The root cause was identified as a software bug introduced during a software upgrade, leading to duplicate payments being processed [Article 134147]. (e) embedded_software: The failure was attributed to contributing factors introduced by embedded software error. Flowbird Smart City UK acknowledged that a software bug introduced during a recent software upgrade caused the duplicate payments, and they were working to fix the problem and process refunds for those affected [Article 134147].
Communication unknown [a134147] The software failure incident related to the parking payment machines in Worcester was not explicitly mentioned to be related to the communication layer of the cyber physical system that failed. The articles primarily focus on a software glitch introduced during a software upgrade by the parking contractor Flowbird, leading to duplicate payments being taken out of people's accounts. The failure was attributed to a software bug causing payments to be duplicated, resulting in financial hardship for affected individuals. The incident does not specifically point to issues at the communication layer of the cyber physical system.
Application TRUE The software failure incident reported in the news articles was related to the application layer of the cyber physical system. The failure was attributed to a software glitch introduced during a recent software upgrade by the parking contractor Flowbird. Flowbird acknowledged that a software bug caused some payments to be duplicated, leading to customers being charged multiple times erroneously. The company mentioned that the problem was due to a software glitch and not the fault of Worcester city council. They also mentioned that they were working to fix the issue and process automatic refunds for those wrongly charged ([134147]).

Other Details

Category Option Rationale
Consequence property (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident in Worcester led to numerous drivers being overcharged for parking fees due to a software glitch in the council's parking payment machines. Drivers reported being charged multiple times for a single parking transaction, resulting in significant financial losses. For example, one individual had their debit card charged 19 times for a £2.70 parking fee, while another individual had £610 drained from their account in 122 transactions [134147]. The total number of individuals estimated to have been overcharged was around 1,500 [132785]. The erroneous charges caused some individuals to face unarranged overdrafts, inability to access their accounts, and financial hardship, with one person mentioning being unable to afford their pending holiday due to the repeated debits [134147]. The council acknowledged the issue and promised refunds to those affected, along with repayment of any associated bank charges [134147].
Domain transportation, finance (a) The failed system was related to the transportation industry, specifically the car parking payment machines in Worcester. The software glitch in the parking payment machines led to multiple unauthorized debits from drivers' bank accounts, causing financial hardship to many individuals [134147, 132785].

Sources

Back to List