Ransomware attack discrupts Metro Vancouver’s payment systems

Ransomware attack discrupts Metro Vancouver’s payment systems

The payments systems remained ineffective for three days after the ransomware attack, but payment data is safe, claims TransLink.


TransLink, the agency that manages the transit system of Metro Vancouver, has become the latest victim of a ransomware attack.


According to reports, the Metro’s payment systems were targeted by Egregor ransomware operators, after which the systems stayed ineffective for three days.


See: San Francisco Railway’ Fare System Hacked for 100 Bitcoin Ransom


The attack affected TransLink employees’ payday as well. The company’s payroll operations aren’t working; therefore, the employees will be paid through a cash advance at 65% of their normal pay without payroll deductions.

A comprehensive forensic investigation is underway to identify what caused the incident to occur and what kind of data could have been impacted.


TransLink’s CEO Kevin Desmond officially confirmed the incident and revealed that the company also received a ransom letter from the attackers that read:



“Your network has been ATTACKED, your computers and servers were LOCKED, your private data was DOWNLOADED. If you do not contact us in the next three DAYS we will begin DATA publication.”


The attacker also included instructions for the admins to pay the ransom. They asked to visit the Egregor website via the Tor browser.



The ransom note left by the attackers



Desmond, on the other hand, assured customers that fare payment data is ..

Support the originator by clicking the read the rest link below.