The hacking group known as Rhysida has issued a threat to auction off data it claims to have extracted from the Maryland Department of Transportation. The asking price for this data is 30 bitcoin (BTC), which is approximately valued at $3.4 million.
This week, Rhysida publicized their intention to conduct a seven-day auction for anyone interested in purchasing the information. The data allegedly includes sensitive items such as social security numbers, identification details, audit reports, confidential legal documents, and communications between attorneys and clients.
“We sell exclusively to one buyer; no reselling allowed. You will be the sole owner,” stated Rhysida.
Read more: Ransomware gang demands 15 bitcoins from ‘world’s largest’ yacht dealer
On Monday, representatives from the Maryland Transit Administration (MTA), which operates under the Maryland Department of Transportation, disclosed that they had experienced an unauthorized cybersecurity incident resulting in “data loss.”
While physical services like buses, subways, and trains continue functioning normally, officials warn that information systems such as call centers might face interruptions.
As a safety measure, users and state employees are advised by the department to update their login credentials promptly. They should also ensure multi-factor authentication is activated on their accounts while remaining vigilant against phishing attempts and keeping devices updated.
“The investigation remains active; further details will be shared when available,” stated MTA officials.
Read more: Data stolen from British Library being sold for bitcoin on dark web
The collective known as Rhysida operates under a ransomware-as-a-service model — named after a poisonous centipede — providing tools for aspiring criminals who then share any ransom proceeds with other members of the group.
The actors associated with Rhysida have targeted luxury yacht dealers along with US hospitals; they’ve also gone after institutions like British Library plus government bodies within Portugal & Kuwait demanding BTC payments in return for compromised data access rights!
Protos has reached out seeking comments regarding these developments directly contacting authorities at MDOT – updates shall follow if responses are received accordingly!