A ransomware attack against San Francisco’s Bay Area Rapid Transit exposed highly sensitive and personal data after a threat group leaked the records.
According to screenshots sent to Cybersecurity Dive, the allegedly stolen data consists of a long list of documents with names like "master employee list," "background disposition" reports, crime lab reports, police reports, a "suspected child abuse report," a controlled substances examination report for heroin, and other highly sensitive and private information.
"id": "BAR41328823",
"linkid": "bart",
"type": "Data Leak",
"date": "01/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"