Cybersecurity Incident Update

PRESS RELEASE:

BALTIMORE, MD (September 22, 2025) The Maryland Transit Administration, Maryland Department of Information Technology, cybersecurity experts, and law enforcement partners continue to investigate the cybersecurity incident that involved unauthorized access to certain Maryland Transit Administration systems.

The investigation has, at this point, confirmed incident-related data loss. The Maryland Department of Information Technology is advising MTA system users and MDOT State employees to take the following actions to help mitigate possible impacts from the cybersecurity event:

1) Recognize Phishing
Phishing attempts can include deceptive emails, texts, or websites designed to trick users into revealing sensitive information such as passwords, financial details, or personal data. They often mimic legitimate organizations, like banks or government agencies. Phishing emails, texts, or websites may ask for personal information or prompt you to click on suspicious links. Be cautious. Do not input personal data or click suspicious links, and verify the sender's email address before taking any action.

2) Update Passwords
Use unique and complex passwords for all personal and work accounts to enhance online security. Password managers make it much easier to manage long, complex passwords for each of your accounts.

3) Enable Multi-Factor Authentication
Multi-factor authentication adds an extra layer of security by requiring multiple forms of verification to access an account. Enabling multi-factor authentication can greatly reduce the risk of unauthorized access to accounts.

4) Update Software on All Devices
It is critically important to regularly update software to ensure that your devices are equipped with the latest security features and patches. This helps protect your devices from potential security threats and vulnerabilities.

To learn more about cybersecurity best practices, Marylanders are encouraged to access free resources provided by the Cybersecurity and Infrastructure Security Agency.

The investigation is ongoing, and more information will be provided as it becomes available. MTA system users who have questions or concerns may contact the call center at 1-800-332-6347. MDOT employees have been advised to contact their IT personnel for further guidance.

The Maryland Transit Administration’s primary goal is to ensure the safety and security of its transit customers and employees and is working with partners to support all communities impacted.

Service Impacts:

MTA core services—including Local Bus, Metro Subway, Light Rail—MARC Train, Commuter Bus, and Mobility Call-A-Ride are operating normally.

Mobility paratransit services are operational. As of Friday, August 29, MTA has partnered with MV Transportation to provide customer service and scheduling support through an interim call system. Mobility/paratransit riders can now schedule, confirm, or adjust trips by calling the MTA mobility reservation number at 410-764-8181 from 8:00 a.m. - 5:00 p.m. Riders are also able to make reservations up to 7 days in advance. To provide additional support, MTA has partnered with Hart to Heart to provide transportation services for those Mobility riders that use a mobility device, such as a wheelchair, and have time-sensitive medical appointments.

For more information on Mobility paratransit services, including how to make reservations and changes, mta.maryland.gov/mobility.

Some MTA service operations and information systems, including real-time information and call centers, may experience impacts.

The  Maryland Transit Administration is one of the largest multi-modal transit systems in the United States, operating systems that include Local Bus, Commuter Bus, Light Rail, Metro Subway, MARC Train Service and a comprehensive Mobility paratransit network. Our goal is to provide safe, efficient, and reliable transit across Maryland with world-class customer service. To learn more, visit mta.maryland.gov, check us out on Facebook at facebook.com/mtamaryland, Instagram at MTA Maryland and follow us on X @mtamaryland and bluesky@mta.maryland.gov.
 

MEDIA CONTACTS:
Courtney Mims
Office: 410-767-8367
Cell: 667-392-0157
cmims@mdot.maryland.gov

Paul Shepard
Office: 410-767-3935
Cell: 443-622-4181
pshepard@mdot.maryland.gov