Sensitive data swiped during a cybersecurity incident at the Maryland Department of Transportation is reportedly being auctioned for 30 Bitcoin, or $3.4 million worth, by hacking collective Rhysida Ransomware. 

Based on auction details gathered by Dark Web Daily, the hacking collective allegedly stole sensitive personal data and information like social security numbers, addresses, dates of birth, and other identifying information. 

It is now reportedly offering the data to a single party in the next seven days. 

As part of a cybersecurity investigation, the Maryland Department of Transportation “confirmed incident-related data loss” related to unauthorized access of Maryland Transit Administration systems. 

It urged users and state employees of the transportation authority to take action to help mitigate the potential effects, like updating passwords and software, and enabling two-factor authentication on their accounts. 

The department did not elaborate further on the types of data and information that were subject to loss, and said the investigation was ongoing as of Monday. A representative for the Maryland Department of Transportation did not immediately respond to Decrypt’s request for comment.



Rhysida’s hacking collective has been operating since at least 2023, primarily targeting education, healthcare, manufacturing, information technology, and government sectors according to a memo from the Cybersecurity and Infrastructure Security Agency (CISA). 

CISA adds that Rhysida actors typically threaten to publish sensitive data if ransom payments are not made, and direct victims to send those payments via Bitcoin. 

Crypto is often used by ransomware operators due to the comparative difficulty of tracking payments compared to traditional, centralized methods.

In July, the Department of Justice sought forfeiture of $2.3 million worth of Bitcoin tied to ransomware attacks and operator group, Chaos. A month later, authorities in Texas sought a similar amount in forfeitures from a different ransomware operator which had extorted victims worldwide.

Ransomware attackers received around $813 million in extortion payments in 2024, down 35% from a record-setting $1.25 billion in payments from 2023 according to Chainalysis.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。