Toronto’s transit company cyberattack exposes 25,000 staff’ information – TechCrunch

The Toronto Transit Fee has confirmed that the private info of tens of 1000’s of staff might have been compromised on account of a ransomware assault on its methods final month. 

The TTC, which operates Toronto’s bus, subway, streetcar and paratransit methods, mentioned in a press release that the compromised information contains the names, addresses and Social Insurance coverage Numbers of 25,000 previous and current staff. The company mentioned it’s persevering with to analyze whether or not a “small quantity” of consumers and distributors have additionally been affected.

The company added that whereas there may be “no proof” that any of the data has been misused, it’s notifying these people affected and can present them with credit score monitoring and id theft safety. The TCC has additionally suggested staff to name their banks and alert them of the safety breach.

The ransomware assault on October 29 resulted in issues with automobile monitoring and “subsequent bus” methods, and the lack of the net Wheel-Trans reserving system, mentioned TTC chief govt Rick Leary. He added that the incident resulted in “various the TTC’s servers being encrypted and locked,” Whereas most customer-facing methods have been restored already, the TTC’s inside e-mail system stays offline.

“On behalf of your entire group, I need to specific my deep remorse that this has occurred to everybody who could also be impacted,” mentioned Leary. “It’s not misplaced on me that organizations like ours are entrusted with vital quantities of non-public info and it’s important that we do our greatest to guard it.

“Over the approaching weeks, we are going to proceed rebuilding the remaining impacted servers and inside companies, like re-establishing exterior e-mail capabilities. However in reality, and primarily based on the experiences of different organizations, this might take a while.”

Leary added the actual fact there have been almost 700 comparable cyber safety assaults involving private and non-private sectors teams in Canada. On October 30, the day earlier than TCC’s ransomware assault, a separate cyberattack struck Newfoundland and Labrador’s well being system information centres. In a press release launched this week, the provincial authorities mentioned “it has been decided that some private info and private well being info was accessed from the methods.”