Impacts From Cybersecurity Incident

Update: 10/9/2025

The Maryland Transit Administration, Maryland Department of Information Technology, third-party cybersecurity experts, and law enforcement partners continue to investigate the cybersecurity incident that involved unauthorized access to certain Maryland Transit Administration systems.

Our primary goal is to ensure the safety and security of our transit customers and employees. MDOT/MTA are working with our partners to support all communities impacted.

This dashboard provides updates on important MTA systems.

Status Key

	Operational – System is functioning normally.
	Limited Service – System is partially available or experiencing minor issues.
	Out of Service – System is impacted or unavailable.

Mobility/Paratransit 

Systems Impacted	Status	Notes
Call Center		Working to stabilize caller wait / hold times
Online Reservation Capability		Interim online reservation system functioning
Certification Office		Office reopened on 10/6. To schedule an appointment, call 410-764-8181, option 6.

Real Time Information

Transit App

Systems Impacted	Status	Notes
Bus		70-75% of buses are currently reporting realtime location. MTA is continuing to work to improve reporting of vehicles.
Light Rail		Real time information is reporting in app
Metro Subway		Real time information is reporting in app
MARC/Commuter Bus		Real time information is reporting in app

Signage

Systems Impacted	Status	Notes
Light Rail		Systems that normally provide real-time information are off-line - scrolling sign that says download transit app which will provide real time information arrivals
Metro Subway		Systems that normally provide real-time information are off-line - scrolling sign that says download transit app which will provide real time information arrivals
MARC		Signage is operational

Transit Hub Digital Screens

Systems Impacted	Status	Notes
Light Rail		Systems that normally provide real-time information are off-line
Metro Subway		Systems that normally provide real-time information are off-line

Other

Systems Impacted	Status	Notes
Service Alerts		System is operational
Bus Headsigns/Stop Announcements		Working to improve accuracy

Transit Information Contact Center

Systems Impacted	Status	Notes
Call Center		Call center is open

Transit Insurance Group

Systems Impacted	Status	Notes
Call Center		Department phones are not working - calls are being redirected 202-657-1820, 202-657-1656 or 202-657-1477

Update: 9/22/2025

The Maryland Transit Administration, Maryland Department of Information Technology, third-party cybersecurity experts, and law enforcement partners continue to investigate the cybersecurity incident that involved unauthorized access to certain Maryland Transit Administration systems. 

The investigation has, at this point, confirmed incident-related data loss. The Maryland Department of Information Technology is advising MTA system users and MDOT State employees to take the following actions to help mitigate possible impacts from the cybersecurity event:

1. Recognize Phishing
   Phishing attempts can include deceptive emails, texts, or websites designed to trick users into revealing sensitive information such as passwords, financial details, or personal data. They often mimic legitimate organizations, like banks or government agencies. Phishing emails, texts, or websites may ask for personal information or prompt you to click on suspicious links. Be cautious. Do not input personal data or click suspicious links, and verify the sender's email address before taking any action.
    
2. Update Passwords
   Use unique and complex passwords for all personal and work accounts to enhance online security. Password managers make it much easier to manage long, complex passwords for each of your accounts.
    
3. Enable Multi-Factor Authentication
   Multi-factor authentication adds an extra layer of security by requiring multiple forms of verification to access an account. Enabling multi-factor authentication can greatly reduce the risk of unauthorized access to accounts. 
    
4. Update Software on All Devices
   It is critically important to regularly update software to ensure that your devices are equipped with the latest security features and patches. This helps protect your devices from potential security threats and vulnerabilities.

To learn more about cybersecurity best practices, Marylanders are encouraged to access free resources provided by the Cybersecurity and Infrastructure Security Agency.

The investigation is ongoing, and more information will be provided as it becomes available.  

Service Impacts

MTA core services (Local Bus, Metro Subway, Light Rail), MARC Train, Mobility, Call-A-Ride, and Commuter Bus are operating normally. 

The Mobility Interim Call Center has resumed regular operations and riders can make reserviations  from 8:00 a.m. - 5:00 p.m. Riders are also able to make reservations up to 7 days in advance. Mornings are usually the best time to call for reservations. Click here for more information on how to schedule trips.

Some buses are not currently providing real-time tracking. This does not affect service, but bus locations and arrival predictions in the Transit app may be incomplete. In the meantime, riders can use Transit’s GO feature, which shares your bus’s location with others waiting down the line.   In addition, riders can still access transit information on the MTA website. For schedule information and updates, visit: https://www.mta.maryland.gov.

Transit Insurance Group: The Transit Insurance Group is currently experiencing a temporary phone system outage.  Alternate phone numbers have been set up to ensure customers can continue to file and manage insurance claims. Please use the following temporary numbers until the regular phone lines are restored: 202-657-1820, 202-657-1656 or 202-657-1477.

Our primary goal is to ensure the safety and security of our transit customers and employees. MDOT/MTA are working with our partners to support all communities impacted.