Vancouver Public Transportation Agency ‘TransLink’ Hit by Ransomware

• ‘TransLink’ in Vancouver is recovering from a ransomware attack they failed to disclose three days ago.
• The actors appear to be “Egregor,” who claim to have stolen sensitive data even though the agency denies it.
• The customers of the transportation service are assured that there are no exposure or safety risks anymore.

‘TransLink’ has confirmed a ransomware attack via an official statement by its CEO, as the disruption in the operations of Vancouver’s public transportation agency is now evident. The attack happened on Tuesday this week, and people immediately had trouble using their Compass metro cards and buying tickets on the agency’s kiosks.

At first, ‘TransLink’ told the public that this was just a temporary technical issue, either because they didn’t want to admit the cybersecurity incident or because they failed to realize the nature of the problem.

Whatever the case, they have confirmed the event now, and they were obliged to clarify a couple of things as a result. First, the agency claims that no customer details or payment data have been compromised or accessed by hackers. Secondly, customers are assured that they can safely use their credit and debit cards at the Compass vending machines again without fearing data loss. And thirdly, ‘TransLink’ has clarified that while not all systems are up and running yet (like the bus GPS), those having to do with transit safety and core operational services are unaffected.

But according to the local media outlet “News1130,” the part that rules out the possibility of the hackers having stolen data from the agency’s network is not entirely truthful. Moreover, a document that is allegedly the ransom note that is being spewed by the printers of the agency has appeared on Twitter today.

The letter indicates that the actors are those of the “Egregor” gang, giving TransLink three days to pay “hundreds of millions of unwanted dollars.” Failing to do so would result in the publication of the private data that the hackers downloaded as part of the attack. No mention of what this data constitutes is to be found in the letter, though, so hopefully, it doesn’t include people’s card details.

TransLink told the press that since there’s an active investigation involving the law enforcement authorities in Canada, they prefer to limit their comments at this time. While this is understandable, making vague reassuring claims about the payment kiosks’ safety so soon after such a catastrophic incident should be avoided.

Instead, TransLink should have reverted to more inconvenient but secure payment methods for a while. Or even better, give tickets free of charge until their systems are fully secured.

Related

LockBit Ransomware Group Returns, Launching 4.0 in February

Rhode Island Hit by Ransomware Attack Impacting Deloitte via RIBridges

Lynx Ransomware Targets Romanian Energy Supplier Electrica

Romanian Electricity Distributor (Electrica) Is Under a Ransomware Attack

Heart Surgery Device Maker, Artivion, Discloses a Ransomware Attack

BT Group Affected by Ransomware Breach by Black Basta Gang

Most Popular

Attack on Titan: The Last Attack- all the Confirmed International Theatrical Release Dates

Den of Thieves 2: Pantera- All we know About the sequel to the Surprise hit Heist film

Does Sonic 3 have a Post-Credits Scene?

What we know so far About Virgin River Season 7

Colleen Hoover’s Verity Movie Adaptation adds two more Hollywood Stars to its cast

Stranger Things Season 5 Release date: One good news and one bad news for fans