The website of Luas, the tram system in Dublin, the capital city of Ireland was hacked on Thursday and the attackers posted a ransom demand which threatened to expose the data which they have stolen from the transport service.
The Ireland-based division of Transdev, the transportation company that runs Luas, pulled their site offline following the incident. The company revealed that the website attack is believed to have affected the data records of around 3,226 people who had signed up for the Luas newsletter.
The ransom note report states that “You are hacked. Some time ago I wrote that you have serious security holes. You didn’t reply. The next time someone talks to you, press the reply button. You must pay 1 Bitcoin worth $3800 in 5 days. Otherwise I will publish all data and send emails to your users.” The message continued and the attackers provided a Bitcoin wallet address to make the payments.
The Luas website is an informational site which only offers travel advice and interactive maps to help the people plan their journeys whereas they buy tickets and make the payments on a different site. This site is not compromised and is online.
The Luas website is still not online as the engineers are working on it. It is also not clear what data has been accessed by the hackers. However, the Luas customers are normally asked to provide their name, phone number and email address when using the contact form of the website. The organization is not believed to have made any ransom payments.