Ransomware strikes Toronto transit system, disrupting some services

Written by
Nov 1, 2021 | CYBERSCOOP

A ransomware attack on Toronto’s transit agency knocked some systems offline over the weekend, an incident that occurred days after another hack disrupted a Michigan transportation agency.

The Toronto Transit Commission said it first discovered the attack on Friday, after seeing “some unusual network activity” the day before. The intrusion initially appeared to have little impact, but the damage escalated “when hackers broadened their strike on network servers,” according to a statement to Canadian media outlets.

Online services for communicating with vehicle operators, information platform screens, trip-planning apps, the commission’s website, an online booking portal and internal email messaging were among the affected systems.

The Ann Arbor Area Transportation Authority — alternately known as TheRide — also said it was the victim of a security incident that disrupted its bus information systems. Neither the Toronto nor Ann Arbor attacks appeared to affect transportation services significantly. There is no indication the hacks are related.

“As soon as we became aware of the situation, our team immediately began taking action,” said Matt Carpenter, CEO of TheRide. “We shut down many of our systems, including our real-time bus information and in-office assistance while

Read More: https://www.cyberscoop.com/toronto-transit-commission-ann-arbor-theride-ransomware/