Montreal’s Transit Service Hit by RansomExx Ransomware

Montreal's transit service was hit by RansomExx ransomware, and they refused to pay the $2.8 mil demanded. The Société de transport de Montréal (STM) says the attack targeted 1,000 of its 1,600 servers.

624 operationally sensitive servers were affected by the attack — but more than three-quarters of them are back within a week, except the website was still down.

The agency said the attack did not affect bus or Metro service, and that employees were able to receive their pay "almost normally." The attack did, however, stop the STM from providing adapted transit for nearly a week. That was reestablished on Sunday, a week after the attack. .

Estimated Cost

services shut down < week

Threat Source

Impacts

IT