SPTrans

SPTrans, also known as São Paulo Transporte Público, is the municipal agency responsible for the planning, coordination and oversight of public transportation in the city of São Paulo, Brazil. It administers the Bilhete Único, an integrated electronic ticketing system that allows users to access buses, metros, trains and other municipal transport modes with a single card. The agency sets fare policies, monitors service quality and works with concessionaires to ensure the operation of the metropolitan transport network. In addition to ticketing, SPTrans provides customer service channels, handles user registrations and maintains the database that supports the Bilhete Único functionality.

The organization’s headquarters are located in São Paulo, reflecting its direct link to the municipal government. As a public entity, SPTrans operates under the authority of the Prefecture of São Paulo and is tasked with aligning transport policies with the city’s urban mobility plans. Its role extends to regulating private operators that run bus lines under municipal contracts, ensuring compliance with safety, accessibility and service standards. The agency also coordinates with state and federal transport bodies to integrate regional services into the Bilhete Único framework.

In December 2022, SPTrans disclosed a cyber‑crime incident that exposed registration data of Bilhete Único users, including names, identification numbers, addresses, contact details and login credentials. The agency confirmed the breach, notified data protection and law‑enforcement authorities, launched a criminal investigation and advised affected individuals to change their passwords. While operational systems and card balances remained unaffected, SPTrans reinforced its security posture by engaging cybersecurity specialists and improving internal controls. Transparency efforts included direct email notifications to users where possible and broader public communications to maintain trust.