Maryland Transit Administration reports cyberattack
Learn More
On August 25, 2025, the Maryland Transit Administration (MTA) reported a cyberattack that has impacted transportation services for disabled residents across the state.
The incident involves unauthorized access to multiple MTA systems and has forced the agency to suspend new trip bookings and rebookings for its Mobility paratransit service, which serves people who cannot access traditional bus stops or wait for fixed-route transportation. The incident also affects some of MTA's service operations and information systems, like real-time information and call centers.
The MTA's core transportation services, bus lines, subways and a light rail system were not affected.
No details are disclosed about the nature of the attack, any exposed data or number of affected individuals.
MTA officials have confirmed that they are working with third-party cybersecurity experts and law enforcement partners to investigate the the incident and mitigate its impact. Authorities are promising updates as more information becomes available.
Update - as of 22nd of September 2025, The Maryland Transit Administration confirmed that the cyberattack caused a data breach and disrupted certain operations like real-time information systems and call centers. The exposed data and number of affected individuals is still not disclosed. Officials are urging users and employees to update passwords, enable multi-factor authentication, and be careful of phishing attempts.
As of 25th of September 2025, The Rhysida ransomware group claimed responsibility for the attack and that they have stolen sensitive data of transportation agency employees including
- full names,
- birth dates
- home addresses
- government issued documents
- Social Security cards/numbers
It shared images of a Maryland driver’s license, passport, Social Security card and other sensitive documents.
Part of the post reads, “Open your wallets and be ready to buy exclusive data". The data is apparently offered for sale and the starting price is 30 Bitcoin.
