Metrolinx

Metrolinx which is an arm's-length organization in charge of transportation for the Toronto and Hamilton area, its computers were infected by a cyber attack originating in North Korea.

It was a virus attack which was routed through Russia, that infected computers at Metrolinx.

The attack did not result in any breach in privacy and did not compromise any safety systems.

North Korea has denied its involvement.

Source: https://www.cbc.ca/news/canada/toronto/north-korean-cyber-attack-metrolinx-1.4500918

TPRM report: https://www.rankiteo.com/company/metrolinx

"id": "met152814522",
"linkid": "metrolinx",
"type": "Ransomware",
"date": "6/2017",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Transportation',
                        'location': ['Toronto', 'Hamilton'],
                        'name': 'Metrolinx',
                        'type': 'Transportation Organization'}],
 'attack_vector': 'Malware',
 'description': 'Metrolinx, an organization responsible for transportation in '
                'the Toronto and Hamilton area, experienced a cyber attack '
                'originating from North Korea. The attack, which was routed '
                'through Russia, infected computers at Metrolinx but did not '
                'result in any breach of privacy or compromise of safety '
                'systems. North Korea has denied its involvement.',
 'impact': {'systems_affected': ['Computers at Metrolinx']},
 'threat_actor': ['North Korea'],
 'title': 'Cyber Attack on Metrolinx',
 'type': 'Virus Attack'}