The Toronto Transit Commission (TTC) experienced a cyberattack Oct. 29, 2021, where the culprits are believed to have gained access to approximately 25,000 past and present employees’ information.
Customer and internal services saw impacts from the attack and some operator and customer-facing features were disrupted, but have since been restored. TTC notes the transit network did not experience a service disruption during the “sophisticated incident.”
“Over the past week, we have been working day and night to resolve this situation – to get our lost services back online and to gain a clearer understanding as to the breadth of the incident,” said TTC CEO Rick Leary. “On behalf of the entire organization, I want to express my deep regret that this has occurred to everyone who may be impacted.”
The transit provider has been working with cybersecurity experts to investigate and restore its systems. TTC says there is evidence information including names, addresses and Social Insurance Numbers were accessed during the attack. Leary says there was not evidence (at the time of his statement) to indicate misuse of the information.
“While we do not have evidence that any of this information has been misused, we are taking steps to ensure those who may be impacted are protected from things like identity theft,” said Leary.
TTC has been notifying employees and individuals who may have been affected by the cybersecurity breach and is providing three years of credit protection through TransUnion.
The investigation will continue to determine if customer or vendor information was compromised. Leary reiterates the TTC’s commitment to learning from the incident.
“Over the coming weeks, we will continue rebuilding the remaining impacted servers and internal services, like re-establishing external e-mail capabilities. But in truth, and based on the experiences of other organizations, this could take some time,” said Leary.
Mischa Wanek-Libman | Group Editorial Director
Mischa Wanek-Libman is director of communications with Transdev North America. She has more than 20 years of experience working in the transportation industry covering construction projects, engineering challenges, transit and rail operations and best practices.
Wanek-Libman has held top editorial positions at freight rail and public transportation business-to-business publications including as editor-in-chief and editorial director of Mass Transit from 2018-2024. She has been recognized for editorial excellence through her individual work, as well as for collaborative content.
She is an active member of the American Public Transportation Association's Marketing and Communications Committee and served 14 years as a Board Observer on the National Railroad Construction and Maintenance Association (NRC) Board of Directors.
She is a graduate of Drake University in Des Moines, Iowa, where she earned a Bachelor of Arts degree in Journalism and Mass Communication.