Maryland Reveals Cybersecurity Breach Impacting Its Transportation Infrastructure

The Maryland Transit Administration (MTA) is currently managing a cyber incident that occurred on August 24, prompting a collaborative effort with the Maryland Department of Information Technology (DoIT), third-party cybersecurity experts, and law enforcement partners to investigate and remediate the issue.

While most core transit services, including Local Bus, Metro Subway, Light Rail, MARC, Mobility, Call-A-Ride, and Commuter Bus, are running as scheduled, there are some disruptions affecting certain services.

The Baltimore Metro Subway elevators are out of service due to the unavailability of elevator emergency phones. Customers with urgent medical needs are advised to contact their healthcare providers or appropriate emergency services. Mobility Paratransit Services, on the other hand, are experiencing temporary disruptions, with new trip bookings and rescheduling of existing trips unavailable.

The Maryland Department of Emergency Management (MDEM) has activated the Statewide Emergency Operations Center (SEOC), which includes the MDEM, the MTA, the DoIT, and other appropriate state agencies.

The MTA has confirmed that all previously scheduled Mobility trips for this week will be honored. However, no new information is provided about the status of new trip bookings or rescheduling of existing trips for Mobility Paratransit Services. The MTA has also not specified any changes to the schedules for Local Bus, Metro Subway, Light Rail, MARC, Commuter Bus, or Mobility services, despite earlier mentions of disruptions to Mobility Paratransit Services.

Real-time updates and call center support continue to experience disruptions due to the cyber incident. The MTA encourages eligible riders to consider using the Call-A-Ride program as an alternative.

The MTA is working diligently to resolve the cyber incident and restore all affected services as soon as possible. More updates will be provided as they become available.