San Francisco Rail System Hacker Hacked
Summary: The San Francisco Municipal Transportation Agency was hit with ransomware on Friday, Nov. 25, 2016, leaving Muni fare terminals displaying "You are Hacked. ALL Data Encrypted" and a contact address, with the attacker demanding 100 Bitcoins (about $73,000) for decryption keys he claimed covered thousands of compromised computers. A researcher who asked to remain anonymous then compromised the attacker's cryptom27@yandex.com inbox by guessing his secret question and resetting the password, exposing messages, a staging server, and more than a dozen Bitcoin wallets the attacker had used since August to extort at least $140,000.
Bottom line: The leaked inbox showed most victims were U.S. manufacturing and construction firms paying roughly one Bitcoin per encrypted server, and China Construction of America paid 24 Bitcoins (about $17,500) for 60 servers after negotiating down from 40 - a working price list for the crime.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026