Toronto Transit Cyberattack: 25,000 Employees' Data Exposed

TTC Data Breach: Employee Information Potentially Compromised

The Toronto Transit Commission (TTC) has recently acknowledged a potential data breach impacting a significant number of its employees. A ransomware attack last month is believed to have compromised personal information.

Scope of the Data Breach

According to the TTC, the personal data of approximately 25,000 current and former employees may have been exposed. This compromised data includes names, addresses, and Social Insurance Numbers. Investigations are ongoing to determine if any customer or vendor data was also affected.

Despite the breach, the TTC states there is currently no indication that any of the stolen information has been misused. Affected individuals are being notified and will be offered credit monitoring and identity theft protection services.

Impact on TTC Systems

The ransomware attack, which occurred on October 29th, initially disrupted several TTC services. These included vehicle tracking, real-time “next bus” information, and the online Wheel-Trans booking system.

TTC Chief Executive Rick Leary explained that a number of the TTC’s servers were encrypted and locked as a result of the incident. While most customer-facing systems have been restored, the internal email system remains unavailable.

TTC Response and Apology

Leary expressed sincere regret for the incident, acknowledging the TTC’s responsibility to protect the personal information entrusted to them. He stated, “It is essential that we do our best to protect it.”

The TTC is actively working to rebuild impacted servers and restore internal services, including external email functionality. However, full restoration may take a considerable amount of time, based on similar incidents experienced by other organizations.

Broader Cybersecurity Concerns

This incident is part of a growing trend of cybersecurity attacks in Canada. Leary noted that nearly 700 similar attacks have targeted public and private sector organizations across the country.

Notably, Newfoundland and Labrador’s health system experienced a separate cyberattack just prior to the TTC incident, on October 30th. The provincial government confirmed that personal and personal health information was accessed during that attack.

The TTC is advising all employees to contact their financial institutions to alert them to the potential security breach.