On the evening of November 18, 2017, the Sacramento Regional Transit systems were hit with ransomware.\u00a0 The initial red flag was when the hackers defaced the Sacramento Regional Transit website.\u00a0 According to the Sacramento Bee<\/a>, when visitors would attempt to access the website, they would instead get a notification stating,<\/p>\n “I\u2019m sorry to modify the home page, i\u2019m good hacker, i I just want to help you fix these vulnerability. This is one of the loopholes, modify the home page …”<\/p><\/blockquote>\n Just hours later, employees found transit files were being deleted in mass amounts.\u00a0 By the time the systems were shut down, 30 million files had been deleted.\u00a0 Hackers then demanded a $7,000 payment to stop the destruction of additional files.\u00a0 However, instead of paying the ransom, the transit officials rebooted the systems which stopped further destruction.<\/p>\n Fortunately, the Sacramento Regional Transit backs up their files daily.\u00a0 Therefore, they are able to replace all of the lost files.\u00a0 Transit services were not disrupted during the ransomware attack, and it is not believed any of the files were taken by the hackers.<\/p>\n To see a full list of ransomware attacks that have taken place this year, you can click here<\/a>. We have also created a map, see below, of the ransomware attacks that have taken place in the U.S.Other Attacks<\/h4>\n
\n