Search This Blog
Powered by Blogger.

Blog Archive

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Transport Firm. Show all posts
Transport Firm
Data Breach Data Leak Private Data Ransomware attack Transport Firm

Rider Data Compromised in Ransomware Attack on TheBus, Handi-Van

 

Private data of TheBus and Handi-Van customers appears to have been hacked in an alleged ransomware attack on the company that operates the transportation services. The websites for TheBus and Handi-Van have been down for four days as the alleged attack continues. 

This is the second hack of Oahu Transit Services in three years, and the FBI and Hawaii Police Department are investigating. Meanwhile, the city's Department of Transportation Services said that the breach began around 1 a.m. Saturday. 

“Our phones went down, our OTS system went down and it became pretty obvious that it was an outside intrusion into the system,” stated Roger Morton, director of the city Department of Transportation Services. “What OTS did was immediately severed all the connections to other systems that they have.” 

The bus and the handi-van continue to run their routes. However, the city claims that websites, GPS, and the Holo card were purposely shut down to safeguard people's data. It might be too late, though. 

Falcon Feeds, an India-based cybersecurity company that monitors "threat actors," shared a screenshot on its X social media account claiming that "Oahu Transit Services Falls Victim to DragonForce Ransomware.” DragonForce claims to have 800,000 pieces of data and has given OTS 10 days from Tuesday to pay the ransom.

“That’s from the DragonForces dark platform, where they shame most of these victims,” noted Nandakishore Harikumar, Falcon Feeds CEO and founder. “Every data breach, even if it’s leaking one line of data, we believe it’s serious.” 

DragonForces is based in Malaysia, but Harikumar is unsure whether the firm that posted the ransom is legitimate or an imposter. Falcon Feeds published screenshots of the data, which included names, addresses, and bus or Handi-Van card ID types. Hawaii News Now masked the private data. 

“We have not paid any ransom,” stated Morton, who added it’s against policy to pay ransoms. “They’re methodically putting the system back. Part of that is disinfecting hundreds of work stations on the chance that they might hold some kind of virus on them.” 

DTS won't confirm a ransomware incident and claims it is being investigated. Meanwhile, Oahu Transit Services has responded to media requests through a Gmail account. According to Morton, OTS expects all online systems to be operational again Wednesday.
Read more »
UK
Bus Operator Cyber Attacks Network Breach Transport Firm UK

UK Transport Firm Go-Ahead Targeted in a Cyber Attack

 

Go-Ahead, one of the UK’s biggest bus operators, has said it is battling a cyber-attack after unearthing “unauthorized activity” on its network earlier in the week. 

The company said it became aware of a network breach late on Sunday and is “currently managing a cyber security incident” to keep buses running without disruption. However, the rail business remained unaffected as it operates on separate systems and is running smoothly in the UK and abroad. 

The cyber attack has affected parts of Go-Ahead’s back office systems, including the software that manages parts of its bus operations, such as driver rostering, although there was no disruption to services on Monday.

“Upon becoming aware of the incident, Go-Ahead immediately engaged external forensic specialists and has taken precautionary measures with its IT infrastructure whilst it continues to investigate the nature and extent of the incident and implement its incident response plans,” the company said in a statement on Tuesday. 

The company has also notified relevant regulators of the attack, including the Information Commissioner’s Office in the UK. 

The Newcastle-based transportation is one of the UK’s biggest bus operators, with networks across South, South West, London, North West, East Anglia, East Yorkshire, and its native North East. The firm also operates multiple high-capacity railway services in the UK including Great Northern, Thameslink, Gatwick Express, and Southern. 

The incident occurred just weeks before Go-Ahead is due to be acquired by a consortium of Australian bus operator Kinetic Holding and Spain’s Globalvia Inversiones, backed by international pension funds. The acquisition previously estimated the value of the UK business at £669m. 

Cyber attacks on governments and other entities have multiplied in recent years. There were 2.8bn known malware attacks in the first half of 2022, up by 11 percent, cyber security company SonicWall reported.

Attacks on European entities surged more rapidly than in the United States. In Europe, the total number of malware attacks grew by 23 percent compared to the first half of 2021. In the United States, the number grew by 2 percent. 

"Cybercrime has been a global phenomenon for decades. But with geopolitical forces accelerating the reconfiguration of the world’s cyber front lines, the true danger presented by threat actors is coming to the fore —, particularly among those that once saw the smallest share of attacks," Bill Conner, president, and chief executive of SonicWall, stated.
Read more »
Subscribe to: Posts (Atom)