Cyber Incident Victim: Bizland
Date:
May 2023
Location:
Argentina
Summary
A hack targeting Bizland disrupted Red Bus card balance loading, leaving residents unable to add credit for bus travel. The company and local authorities established a temporary manual system at limited locations, resulting in significant delays. Despite restoration efforts, contractual failures prompted municipal sanctions due to the absence of a contingency plan during the multi-day outage.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 4 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 11, 2023, residents of Córdoba, Argentina, lost the ability to add credit to their Red Bus cards, disrupting urban transportation payments. Bizland, the company managing the Red Bus system, attributed the outage to a cyberattack that compromised its balance-loading infrastructure. The disruption persisted through the weekend, preventing users from reloading cards via neighborhood businesses or digital platforms like Mercado Pago and Pago mis Cuentas. By May 13-14, the Municipality of Córdoba and Bizland established a manual "parallel system" enabling limited balance charging at 31 designated locations citywide. This stopgap measure resulted in significant operational strain, with long queues forming at the few operational points. The Undersecretary of Transportation, Federico Ingaramo, confirmed the workaround required manual processing while the primary system remained offline.
By May 15, municipal officials reported restoring administrative functions but noted ongoing technical hurdles in reactivating point-of-sale terminals for businesses. Digital reload options remained unavailable at that stage. The Municipality emphasized prioritizing Red Bus card functionality while announcing financial penalties against Bizland for contractual non-compliance. Ingaramo acknowledged Bizland was "a victim" of the attack but criticized its lack of contingency planning, citing the four-day outage duration as unreasonable. No restoration timeline was provided for full service normalization. The incident directly impacted public transit accessibility, forcing manual interventions and exposing systemic vulnerabilities in critical payment infrastructure.