TTC is investigating ransomware attacks that compromised multiple servers

TORONTO – The Toronto Transit Commission says it is investigating a ransomware attack that shut down some of its communications system and affected a number of its services on Friday.

In a statement issued Friday night, TTC said they first became aware of the attack Thursday when an IT employee discovered there was an “unusual networking activity.”

The TTC said the impact of the hack was initially “minimal,” but mid-Friday “hackers extended their strike on network servers.”

“We discovered it late yesterday afternoon, late at night. And then today, it became really, really pretty clear. A number of our servers were compromised,” TTC spokesman Stuart Green told CP24.

“Right now, our priority is to secure our system. And then we find out how it all happened, and to make sure it doesn’t happen again.”

The attack has crippled TTC’s Vision System, which is used to communicate with vehicle operators.

“We have radio backup, so there are no problems communicating with the operators,” Green said.

Hackers also removed the ‘Next Vehicle Information System’ on platform screens, travel planning apps, the TTC website and the online booking portal Wheel-Trans.

TTC’s internal email service was also affected.

“I’m talking to you on my personal phone because we do not have network systems here or network service here in the TTC office. So I do not have email. I do not have Internet service. So that’s the kind of thing that’s being affected right now. , “said Stuart.

TTC noted that there were no major service disruptions during the attack, and “there is no risk to employee or customer safety.”

Stuart said they have called for law enforcement and are working with cyber security experts, including Toronto’s IT department, to determine what happened.

“We think we’re contained it now. We need to do some testing and some maintenance overnight just to make sure our systems are safe and secure,” he said.

When Stuart was asked if TTC has been contacted by hackers to ask for ransom, Stuart said: “Since these things are criminal investigations, there is nothing I can say about what is going to happen that will let the police do their work, law enforcement. “

The TTC announced that it is canceling its planned closure of the subway on Saturday between St. Clair and College stations

“Our priority right now is to secure our system and ensure that we can get our customer information systems and our vision system completely online again,” he said.

“We want to do some due diligence and make sure we’ve solved all the security issues we have around the security of our system.”


Leave a Comment