Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

‘You Hacked’ appears at Muni stations as fare payment system crashes

“You Hacked, ALL Data Encrypted.”

That was part of the message displayed on computer screens at Muni stations across San Francisco on Saturday in what appears to be a computer hack targeting The City.

Along with the message, fare payment machines at Muni underground stations read, “OUT OF SERVICE” in red LED letters.

UPDATE: Alleged Muni ‘hacker’ demands $73,000 ransom, some computers in stations restored

UPDATE: Muni guarantees customer data not at risk as hacker sends new threat

“We got hacked,” one Muni operator clad in a brown Muni uniform said at Van Ness Station on Saturday. He didn’t want to share his name for fear of workplace retaliation, but said Muni has been “hacked” since Friday afternoon.

The entire message read, “You Hacked, ALL Data Encrypted. Contact For Key(cryptom27@yandex.com)ID:681 ,Enter.”

Paul Rose, a San Francisco Municipal Transportation Agency spokesperson, said the agency was investigating but did not comment on whether Muni was hacked.

“We are currently working to resolve the situation,” Rose said. “There is an ongoing investigation and it wouldn’t be appropriate to provide additional details.”

The message is reminiscent of “ransomware,” a term for a type of email malware which can be downloaded mistakenly by an employee, though it was not confirmed this is how the message appeared.

According to a guide on ransomware from Microsoft.com, the malware may ask those locked out of their data to pay a fine before releasing the locked out data.

It was still unclear Saturday afternoon how far the apparent Muni hack has extended, or whether other San Francisco agencies were affected. Unable to charge its customers, Muni was allowing free rides on its light-rail vehicles.

Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)
Muni’s fare payment system read “Out of Service” Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

Some SFMTA employees told the San Francisco Examiner that their email did not work, though it was unclear whether that was affecting all of the SFMTA’s nearly 6,000 employees.

Muni station operators told the Examiner that Muni subway fare gates were locked in an open position, and could not be electronically closed. Rose said the fare gates were intentionally opened to foster the free Muni service.

Transit service was not impacted, Rose said.MuniSFMTATransit

If you find our journalism valuable and relevant, please consider joining our Examiner membership program.
Find out more at www.sfexaminer.com/join/

 

A message reading "You Hacked" was displayed on Muni computers Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

A message reading "You Hacked" was displayed on Muni computers Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

An electronic message reading "You Hacked" was displayed on Muni computers Saturday. (Courtesy photo)

An electronic message reading "You Hacked" was displayed on Muni computers Saturday. (Courtesy photo)

Just Posted

A sign about proposed development of the bluff at Thornton State Beach in Daly City on Friday, Feb. 26, 2021. (Kevin N. Hume/S.F. Examiner)
Retreat center proposed at popular state beach

Daly City residents oppose construction on ocean bluffs

Rev. Roland Gordon shows “The Great Cloud of Witnesses” collage mural at the Ingleside Presbyterian Church, which he began building in 1980.<ins> (</ins>
Rev. Roland Gordon preaches love in action

Pastor promotes peace, hope through art and prayer

Basketball (Shutterstock)
SI alum Begovich gets his moment, but Stanford falls on Senior Day

MAPLES PAVILION — Generally speaking, Stanford’s home finale on Saturday afternoon, a… Continue reading

U.S. Attorney David Anderson announces federal firearms charges against two men for their roles in a March 2019 shooting outside the Fillmore Heritage Center in a news conference alongside SFPD staff at the Phillip Burton Federal Building on Thursday, Jan. 9, 2020. (Kevin N. Hume/S.F. Examiner)
Departing U.S. attorney predicts corruption probe will continue

David Anderson shook up City Hall as top federal prosecutor

Board of Supervisors President Shamann Walton, a former school board member, has been asked to help secure an agreement between the school district and teacher’s union. <ins>(Kevin N. Hume/S.F. Examiner)</ins>
 <ins></ins>
Supervisor Walton tapped to mediate teacher contract talks

District and union at odds over hours in-person students should be in the classroom

Most Read