Montreal’s Transit Service Hit by RansomExx Ransomware

February 26, 2024


Montreal's transit service was hit by RansomExx ransomware, and they refused to pay the $2.8 mil demanded. The Société de transport de Montréal (STM) says the attack targeted 1,000 of its 1,600 servers.

624 operationally sensitive servers were affected by the attack — but more than three-quarters of them are back within a week, except the website was still down.

The agency said the attack did not affect bus or Metro service, and that employees were able to receive their pay "almost normally." The attack did, however, stop the STM from providing adapted transit for nearly a week. That was reestablished on Sunday, a week after the attack. .

Incident Date

October 19, 2020



Estimated Cost

services shut down < week

Type of Malware

Threat Source

No threat source identified