The Rhysida ransomware group claims to have breached The Maryland Department of Transportation (MDOT), a state-level government agency. MDOT is comprised of five administrations covering aviation, port, motor vehicle, state highway, and transit, as well as the Maryland Transportation Authority and the Washington Metropolitan Area Transit Authority.
The ransomware group has published a selection of data allegedly stolen from the department and is auctioning the full dataset with a starting price of 30 BTC.
According to the actor, the compromised data is extensive and includes sensitive personal and internal information. The allegedly stolen data includes:
- Full names
- Social Security Numbers (SSNs)
- Dates of birth
- Home addresses
- Driver’s license details
- Passport information
- Internal financial reports
- Confidential legal documents and attorney-client communications
- Department of Legislative Services audit reports
