After fraudsters claimed to have 200GB of data and threatened to publish it on Sunday, October 10, the French transportation major Transdev has refuted any claims that any of its material was taken by a ransomware organization.

On its leak page, the LockBit ransomware gang mentioned Transdev next to a timer that will expire at 1:00 on Sunday.

Transdev, however, claimed that the data being sold by Lockbit came from one of their clients. Transdev is described by calls itself as the “biggest private provider of several modes of transportation in North America.”

“We are aware that a group of online criminals has threatened to reveal material that they claim belongs to Transdev. A Transdev spokeswoman told ZDNet, “However, we believe the data referred to by the criminal group likely belongs to a Transdev Client that was the target of a cyber attack in mid-September.

“With the help of outside digital forensic experts, we have been looking into this incident. The incident involving the client’s data was restricted to the client’s network, which is guarded by our security monitoring and defensive systems and communicates with Transdev’s corporate environment only through very strong firewall regulations. There is currently no evidence that any data belonging to Transdev Corporate or to another client was open to access or exfiltration.

Currently operating in 18 nations, Transdev has contracts to manage the transportation networks of numerous cities, counties, airports, businesses, and colleges. According to their website, Transdev conducts 200 million passenger trips annually and earns more than $1 billion in revenue.

The US-based transportation company Transdev employs over 15,000 people and operates six distinct types of vehicles, including buses, shuttles, school buses, paratransit, streetcars, microtransit, and autonomous vehicles.

The incident comes one day after US Homeland Security Secretary Alejandro Mayorkas issued announced new cybersecurity regulations for US railroad and airport operators in an effort to defend critical infrastructure against nation-state attackers and ransomware gangs.

Cybercriminals and ransomware groups have attacked businesses and organizations managing transportation systems despite warnings and threats from US politicians.
US President Joe Biden announced in a statement on Friday that the White House will host a 30-nation gathering this month to discuss cybersecurity.
To address cybersecurity, Biden stated that “the Federal government requires the participation of every American and every American firm.”

By employing multifactor authentication and encrypting data, for example, we can lock down our digital doors. We also need to develop technology safely by default so that customers can understand the dangers associated with the products they purchase.

Subscribe to us!