TTC targeted by ransomware threat

Article content

The Toronto Transit Commission continues to investigate Friday’s ransomware incident.

Article content

The unusual network activity was detected by an IT staff member Thursday and Friday afternoon, according to a statement from the TTC. posted on Twitter, the hackers “extended their attack to network servers.”

Although there has been minimal, if any, disruption to service, the attack removed internal email from TTC workers, the “Next Vehicle” information system, and the Vision System, which is a communication system. with drivers and vehicle operators. The latter service is supported by radio, so communication continues without interruptions.

What affects transit customers the most: You can’t book Wheel-Trans online right now, and you can’t check the TTC app, platform screens, or website to know when to wait for the next bus or train.

Article content

In a statement posted on Twitter, the TTC assured Toronto residents that the system remained safe and secure. TTC is working with police and cybersecurity experts, according to its statement, and the city’s IT team has also been consulted.

Track work on a portion of Line 1 planned for Saturday between St. Clair and College stations was canceled.

Shabnum Durrani, TTC’s head of corporate communications, offered an update on Saturday, saying that work to resolve the issue was ongoing and the service was not affected.

Regarding whether or not some kind of ransom has been demanded, he said: “I can’t talk about that.”

But as TTC spokesman Stuart Green said Friday, this is a criminal investigation, “and we will let the police do their job.”

Article content

Durrani said: “There were very few service interruptions. For Wheel-Trans, you can still call. We are now printing the schedules.

“There are other things: if you want to search for the next bus or train, you can’t see that right now.”

Durrani said there is no cause for alarm.

“I took the subway to work and I plan to take it later today,” he said. “And I’ll take my children in transit later today.”

When asked if staff had ever discussed what would happen in the event of a cyberattack, Durrani said the TTC does indeed have established protocols.

“We have systems and processes that we follow, so we don’t start at zero point,” he said.

[email protected]