The Toronto Transit Commission (TTC) experienced a cyberattack Oct. 29, 2021, where the culprits are believed to have gained access to approximately 25,000 past and present employees’ information.
Customer and internal services saw impacts from the attack and some operator and customer-facing features were disrupted, but have since been restored. TTC notes the transit network did not experience a service disruption during the “sophisticated incident.”
“Over the past week, we have been working day and night to resolve this situation – to get our lost services back online and to gain a clearer understanding as to the breadth of the incident,” said TTC CEO Rick Leary. “On behalf of the entire organization, I want to express my deep regret that this has occurred to everyone who may be impacted.”
The transit provider has been working with cybersecurity experts to investigate and restore its systems. TTC says there is evidence information including names, addresses and Social Insurance Numbers were accessed during the attack. Leary says there was not evidence (at the time of his statement) to indicate misuse of the information.
“While we do not have evidence that any of this information has been misused, we are taking steps to ensure those who may be impacted are protected from things like identity theft,” said Leary.
TTC has been notifying employees and individuals who may have been affected by the cybersecurity breach and is providing three years of credit protection through TransUnion.
The investigation will continue to determine if customer or vendor information was compromised. Leary reiterates the TTC’s commitment to learning from the incident.
“Over the coming weeks, we will continue rebuilding the remaining impacted servers and internal services, like re-establishing external e-mail capabilities. But in truth, and based on the experiences of other organizations, this could take some time,” said Leary.
