Transportation operations disrupted

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Backlog created
• Customer or public access restricted
• Degraded service
• Delayed opening or early closure
• Dispatch disruption
• Facility closure
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Records processing disruption
• Remote access disruption
• Safety risk or operational hazard
• Scheduling disruption
• Service delay
• Staff unable to work normally
• Supply chain disruption
• Third-party service disruption

Incident impacts and related organization locations

• Allegany County, Maryland
• Baltimore, Maryland
• Charlotte, North Carolina
• Cumberland, Maryland
• Gaithersburg, Maryland
• Los Angeles County, California
• Los Angeles, California
• Lower Swatara Township, Pennsylvania
• Maryland
• Menlo Park, California
• Morehead City, North Carolina
• Palo Alto, California
• Pittsburgh Regional Transit service area, Pennsylvania
• Pittsburgh, Pennsylvania
• Redwood City, California
• Wilmington, North Carolina

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data sample published
• Leak-site listing
• No known extortion indicator
• Payment denied
• Ransom demand
• Unknown extortion indicators

Data effects recorded on related incidents

• Data alteration or manipulation
• Data deletion or destruction
• Data publication or leak
• Data theft or exfiltration
• Data unavailable
• Unknown data impact

Mechanisms recorded on related incidents

• Credential compromise
• Malware
• Ransomware
• Unauthorized access
• Unknown cyber mechanism

Ransomware assessment of related incidents

• High
• Medium
• Not Ransomware
• Unresolved

Derived through public incident claims

• Ababil of Minab
• RansomHub
• Rhysida

Cyber-transparency classifications of related incidents

• External cyber → official
• External cyber only
• Official cyber

Actor attribution assessment

• High
• Low
• Unresolved

Classifications of related threat groups

• Hacktivist Group
• Ransomware Group

Transparency assessments of related incidents

• OC-OD
• XC-XD

Disruption-transparency classifications of related incidents

• External disruption only
• Official disruption

Current status of related incidents

• Presumed Resolved
• Resolved

Assessment confidence of related incidents

• High
• Medium

Current assessment of whether incidents are cyber-related

• Confirmed