An update on the TTC's cyber security incident confirms that the personal information of up to 25,000 past and present employees has been stolen.
This personal information includes names, addresses and Social Insurance Numbers.
"The TTC continues to investigate whether a small number of customers and vendors may also be affected and will notify when there is further information as appropriate," information from Toronto's transit system reads.
TTC became aware of this situation on Oct. 29 and "public-facing systems are now mainly restored and the investigation continues."
These restored services and systems are:
TTC’s Vision system, used to communicate with vehicle operators
Next vehicle information on platform screens, through trip planning apps and on the TTC website
Online Wheel-Trans bookings
At this point, TTC confirmed that there is "no evidence" that any of this personal information has been "misused" and TTC is notifying all individuals who may have been affected, providing three years of credit monitoring protection through TransUnion.
Information on how to set up the credit monitoring, employees can call a dedicated TransUnion line at (855) 912-1512.
"Over the past week, we have been working day and night to resolve this situation – to get our lost services back online and to gain a clearer understanding as to the breadth of the incident," a statement from TTC CEO Rick Leary reads.
— TTCStuart 🚈🗣️ (@TTCStuart) November 8, 2021
"What we know about the threat actors in this case is that they belong to an extremely well-organized enterprise. On behalf of the entire organization, I want to express my deep regret that this has occurred to everyone who may be impacted."