Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

‘You Hacked’ appears at Muni stations as fare payment system crashes

“You Hacked, ALL Data Encrypted.”

That was part of the message displayed on computer screens at Muni stations across San Francisco on Saturday in what appears to be a computer hack targeting The City.

Along with the message, fare payment machines at Muni underground stations read, “OUT OF SERVICE” in red LED letters.

UPDATE: Alleged Muni ‘hacker’ demands $73,000 ransom, some computers in stations restored

UPDATE: Muni guarantees customer data not at risk as hacker sends new threat

“We got hacked,” one Muni operator clad in a brown Muni uniform said at Van Ness Station on Saturday. He didn’t want to share his name for fear of workplace retaliation, but said Muni has been “hacked” since Friday afternoon.

The entire message read, “You Hacked, ALL Data Encrypted. Contact For Key(cryptom27@yandex.com)ID:681 ,Enter.”

Paul Rose, a San Francisco Municipal Transportation Agency spokesperson, said the agency was investigating but did not comment on whether Muni was hacked.

“We are currently working to resolve the situation,” Rose said. “There is an ongoing investigation and it wouldn’t be appropriate to provide additional details.”

The message is reminiscent of “ransomware,” a term for a type of email malware which can be downloaded mistakenly by an employee, though it was not confirmed this is how the message appeared.

According to a guide on ransomware from Microsoft.com, the malware may ask those locked out of their data to pay a fine before releasing the locked out data.

It was still unclear Saturday afternoon how far the apparent Muni hack has extended, or whether other San Francisco agencies were affected. Unable to charge its customers, Muni was allowing free rides on its light-rail vehicles.

Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)
Muni’s fare payment system read “Out of Service” Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

Some SFMTA employees told the San Francisco Examiner that their email did not work, though it was unclear whether that was affecting all of the SFMTA’s nearly 6,000 employees.

Muni station operators told the Examiner that Muni subway fare gates were locked in an open position, and could not be electronically closed. Rose said the fare gates were intentionally opened to foster the free Muni service.

Transit service was not impacted, Rose said.MuniSFMTATransit

If you find our journalism valuable and relevant, please consider joining our Examiner membership program.
Find out more at www.sfexaminer.com/join/

 

A message reading "You Hacked" was displayed on Muni computers Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

An electronic message reading "You Hacked" was displayed on Muni computers Saturday. (Courtesy photo)

Just Posted

Two new contractors charged with bribery in Nuru scandal

Two construction executives are facing federal bribery charges for allegedly giving former… Continue reading

S.F. museums to reopen to the public

Visitor capacity limited to 25 percent as safety measure

Small businesses in limbo as end of eviction moratorium nears

Many commercial tenants ‘teetering on the edge,’ unable to pay rent

Despite long run of ‘Spare the Air’ days, free transit remains a rarity

In response to weeks of unhealthy air quality caused by smoke from… Continue reading

City hopes to convert Granada Hotel to supportive housing

State grant could allow purchase of 232-unit Lower Nob Hill SRO

Most Read