Toronto Transit Commission

The Toronto Transit Commission, also known as the TTC, operates public transportation services within Toronto, Canada. Its core function involves managing and delivering transit options to residents and visitors in the city. This includes running subway trains, buses, and streetcars to facilitate movement across the metropolitan area. The organisation focuses on providing essential urban mobility infrastructure for Canada's largest city.

A notable distinguishing attribute of the TTC is its experience with significant cybersecurity incidents impacting operational technology. In October 2021, the organisation suffered a ransomware attack that disrupted multiple critical systems. This incident affected real-time communications between operators and Transit Control, digital schedule displays on platforms and in applications, internal email functionality, and online booking services. While unusual network activity was detected prior to the full impact, the attack marked the third ransomware incident targeting a major Canadian transit system within a twelve-month period. The TTC's internal IT teams responded by collaborating with law enforcement agencies, external cybersecurity experts, and municipal IT services during the investigation. The specific threat actor responsible for this disruptive event remained unidentified despite these efforts.