Transport – is your risk in the third party?

Wherever there is a critical service, there is an attractive target for cybercrime.

We were reminded of this recently when South African Airlines lost its website and customer app for a day due to a ransomware attack¹. The incident followed recent attacks on Washington's Metropolitan Area Transit Authority² and Denmark's State Railway³. In the two latter breaches, the hackers gained access to the transport operators' systems through third-party suppliers or contractors.

The list of breaches is long and the impacts expensive. More examples include a ransom demand for stolen data from San Francisco's Bay Area Rapid Transit, a Chinese hack into the New York Metropolitan Transit Authority and two attacks on Toronto's Metrolinx, one of which affected trip-planning apps, the website and more. Vancouver's TransLink had its payment and communications systems disabled and employee personal data breached. When the Southeastern Pennsylvania Transportation Authority was hit by a