Skip to content

MTA Hit by Rhysida Ransomware Attack, Exposing Sensitive Data

MTA's Mobility service was targeted, impacting real-time information. Residents warned as stolen data is shared. Second state government ransomware attack this week.

Graffiti is on the train. These are cables. Background there are houses with windows.
Graffiti is on the train. These are cables. Background there are houses with windows.

MTA Hit by Rhysida Ransomware Attack, Exposing Sensitive Data

Maryland's Transit Administration (MTA) has been hit by a cyberattack, with ransomware gang Rhysida claiming responsibility. The incident, which occurred in August, disrupted services and exposed sensitive data.

The attack targeted the MTA's Mobility service, impacting real-time information systems and tools. However, core transportation services remained unaffected. Rhysida, known for its history of targeting government entities, demanded a ransom of 30 bitcoin, worth approximately $3.4 million, with a seven-day deadline.

The gang shared samples of stolen data, including passports, driver's licenses, and contracts, causing significant disruption and raising concerns about data security. The MTA advised residents to take protective measures, such as watching for phishing emails, changing passwords, using multifactor authentication, and updating device software. Mobility service was restored through an interim call system on August 29, but the full recovery effort is ongoing.

This attack is the second alleged ransomware incident involving a state government this week, following a breach of Pennsylvania's attorney general office. Authorities are investigating the incident, and the MTA continues to work on restoring full services and ensuring data security.

Read also:

Latest