Kronos hackers stole personal info of Metro-North workers, MTA says

Ransomware hackers who breached the community of MTA timeclock supplier Kronos made off with the private info of a number of present and former Metro-North staff, transit management stated Thursday.

“Kronos not too long ago knowledgeable us that some recordsdata containing private info of some present and former MTA staff at certainly one of our companies – Metro-North Railroad – had been accessed by the perpetrators of this ransomware incident,” MTA Chief Administrative Officer Lisette Camilo stated in an e-mail to the authority’s roughly 70,000 staff.

“The knowledge accessed didn't embrace Social Safety numbers, driver’s license numbers, financial institution or different monetary establishment account numbers, or biometric info,” Camilo’s e-mail stated. “Presently, Kronos has no proof that the private info of another MTA staff was accessed.”

The MTA has organized with Kronos and its mum or dad firm to supply all present and former staff two years of free credit score monitoring and id theft safety, the e-mail stated.

The back-end of the MTA’s high-end timekeeping system went darkish Dec. 13 after Kronos skilled the ransomware assault over the earlier weekend.

MTA Chief Administrative Officer Lisette Camilo
MTA Chief Administrative Officer Lisette Camilo despatched an e-mail to over 70,000 MTA staff informing them of the info breach.
Paul Martinka

Staff should nonetheless swipe out and in of labor utilizing the Kronos clocks, because the native hardware continues to perform — although some staff are unable to obtain greater than 40 hours of wages per week and are primarily working time beyond regulation for an IOU.

MTA officers rolled out Kronos authority-wide about two years in the past after The Put up uncovered allegations of time beyond regulation abuse following a collection of exposés on Lengthy Island Rail Highway staff pulling in enormous paychecks.

The “biometric” clocks require staff to swipe out and in of labor, and scan their fingerprints after they achieve this — one thing consultants employed by the MTA stated would forestall and catch fraud.

Transit officers stated the leaked knowledge included “names and dates of start” and that the MTA “has taken preliminary steps to implement its authorized rights.”

“The MTA is working to make sure that Kronos takes all steps vital to handle this incident and to safeguard the info of MTA staff going ahead,” MTA spokesman John McCarthy stated in a press release. “The MTA will monitor Kronos’ progress and proceed to require affirmative steps be taken to handle the regrettable affect of the present cybersecurity assault.”

Post a Comment

Previous Post Next Post