Kansas City public transportation authority hit by ransomware

KCATA announced a ransomware attack on January 23 that impacted its communication systems and call centers while transit operations continued; the Medusa ransomware group claimed responsibility, published alleged data samples on their extortion portal, and demanded $2,000,000 with a 10-day negotiation window and an option to extend for $100,000/day, raising concerns about potential exposure of customer personal and payment data.