Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

‘You Hacked’ appears at Muni stations as fare payment system crashes

“You Hacked, ALL Data Encrypted.”

That was part of the message displayed on computer screens at Muni stations across San Francisco on Saturday in what appears to be a computer hack targeting The City.

Along with the message, fare payment machines at Muni underground stations read, “OUT OF SERVICE” in red LED letters.

UPDATE: Alleged Muni ‘hacker’ demands $73,000 ransom, some computers in stations restored

UPDATE: Muni guarantees customer data not at risk as hacker sends new threat

“We got hacked,” one Muni operator clad in a brown Muni uniform said at Van Ness Station on Saturday. He didn’t want to share his name for fear of workplace retaliation, but said Muni has been “hacked” since Friday afternoon.

The entire message read, “You Hacked, ALL Data Encrypted. Contact For Key(cryptom27@yandex.com)ID:681 ,Enter.”

Paul Rose, a San Francisco Municipal Transportation Agency spokesperson, said the agency was investigating but did not comment on whether Muni was hacked.

“We are currently working to resolve the situation,” Rose said. “There is an ongoing investigation and it wouldn’t be appropriate to provide additional details.”

The message is reminiscent of “ransomware,” a term for a type of email malware which can be downloaded mistakenly by an employee, though it was not confirmed this is how the message appeared.

According to a guide on ransomware from Microsoft.com, the malware may ask those locked out of their data to pay a fine before releasing the locked out data.

It was still unclear Saturday afternoon how far the apparent Muni hack has extended, or whether other San Francisco agencies were affected. Unable to charge its customers, Muni was allowing free rides on its light-rail vehicles.

Muni's fare payment system read "Out of Order" Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)
Muni’s fare payment system read “Out of Service” Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

Some SFMTA employees told the San Francisco Examiner that their email did not work, though it was unclear whether that was affecting all of the SFMTA’s nearly 6,000 employees.

Muni station operators told the Examiner that Muni subway fare gates were locked in an open position, and could not be electronically closed. Rose said the fare gates were intentionally opened to foster the free Muni service.

Transit service was not impacted, Rose said.

 

A message reading "You Hacked" was displayed on Muni computers Saturday. (Joe Fitzgerald Rodriguez/S.F. Examiner)

An electronic message reading "You Hacked" was displayed on Muni computers Saturday. (Courtesy photo)

Just Posted

New limits proposed on extended-stay rentals

Legislation introduced Tuesday aims to regulate a growing trend of companies leasing… Continue reading

Slow to reform, SFPD touts lack of police shootings as sign of progress

Department has completed about 10 percent of federal recommendations for improvement

PG&E reduces number of customers affected by potential shutdown from 209,000 to 184,000

PG&E has reduced the number of customers it expects to be affected… Continue reading

SFPD issuing fewer life-saving traffic tickets because of ‘additional paperwork’

In August, Mayor London Breed and traffic safety watchers blasted San Francisco… Continue reading

Transbay BART tube reopens after service halted by sparks during rush hour

Sparks near the transbay tube prompted BART to halt some service between… Continue reading

Most Read