The Toronto Transit Commission announced on Friday that its systems have been infected with ransomware, the attack began on Thursday night and disrupted its activities. At this time, no ransomware gang has taken responsibility for the attack.
TTC spokesman, Stuart Green, initially declared that the attack had no significant impact on the transit service, but things have gotten worse since Friday.
“Impact was minimal until midday today (Friday) when hackers broadened their strike on network servers,” reads a press release published by the agency.
The security breach impacted the agency’s internal email server, the Wheel-Trans bookings, the vehicle information on platform screens, apps, and the TTC Vision communication system, along with other internal systems.
The drivers were forced to communicate using a classic radio-based communication system.
The TTC also announced to have canceled a Saturday subway closure on Line 1 between St. Clair and College stations which was going to be used to complete track work.
“The full extent of the attack is being looked into and the TTC is working with law enforcement and cybersecurity experts on this matter. The City of Toronto’s IT Services department has also been consulted.” continues the statement.
The public transportation routes were not impacted by the incident. TTC reported the incident to the authorities and an investigation is still ongoing.
This isn’t the first ransomware attack that hit the public transportation systems in Canada. In October 2020, an attack hit Montreal’s STM, and two months later another attack hit Metro Vancouver’s transportation agency TransLink.
Follow me on Twitter: @securityaffairs and Facebook
[adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – hacking, ransomware)
[adrotate banner=”5″]
[adrotate banner=”13″]
Experts found two vulnerabilities in the vBulletin forum software, one of which is already being…
Security Affairs Malware newsletter includes a collection of the best articles and research on malware…
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best…
Qualys warns of two information disclosure flaws in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise…
Meta stopped three covert operations from Iran, China, and Romania using fake accounts to spread…
The U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major…
This website uses cookies.