Kansas public transportation authority hit by ransomware

KCATA, the Kansas City Area Transportation Authority, suffered a ransomware attack (reported Jan 23) that impacted all communication systems and call centers; Medusa claimed responsibility, posted alleged stolen data samples on its extortion portal, and demanded $2,000,000 with an option to extend the deadline for a daily fee. Transit services continued to operate, but the incident raises potential exposure of customer and payment data and prompted engagement with external cyber professionals and law enforcement.