Transportation Cybersecurity & Data Privacy News Roundup for 2024
Sherpa Intelligence: Your Guide Up a Mountain of Information!
4 min readDec 27, 2024
A roundup of cybersecurity and data privacy news items regarding the transportation industry for the year 2024.
Transportation, as defined for this newsletter, includes maritime, rail, aviation, bus, car, trucking, and more.
This is not a comprehensive list, rather, highlights from each month of the year.
January 2024
- Saudi Arabia Boosts Railway Cybersecurity
(Dark Reading, January 26th) - Addressing OT cybersecurity threats in transportation sector through enhanced strategies, collaboration
(Industrial Cyber, January 28th) - Medusa ransomware gang claimed responsibility for the attack against the Kansas City Area Transportation Authority (KCATA)
(Security Affairs, January 28th)
February 2024
- A fleet of drones is being deployed to monitor NSW traffic
(Cyber Daily Australia, February 5th) - Chinese hackers infiltrated plane, train and water systems for five years, US says
(The Guardian UK, February 8th) - Biden administration issues executive order on port cybersecurity
(Cybersecurity Dive, February 21st)
March 2024
- New rules proposed to address cyber security in maritime industry
(WorkBoat, March 5th) - A Brazen Yogurt Heist Shows How Cyber Gangs Are Hijacking U.S. Goods
(The Wall Street Journal, March 24th) - Israeli firm C2A to supply cybersecurity platform for Daimler Trucks
(Reuters, March 28th)
April 2024
- U.S. Department of Transportation to Review Airlines’ Data Security and Privacy Policies
(CPO Magazine, April 1st) - Sabotage on European railways: Czech minister accuses Russia of attempts
(Railway Supply, April 9th) - Transportation industry hit hard by cyber attacks in 2023
(Logistics Middle East, April 15th) - Navigating cybersecurity challenges in the transport industry
(Railway Technology, April 22nd) - Mineta Transportation Institute (MTI) report outlines changing pattern in transit cybersecurity risk and how to manage it
(Mass Transit, April 25th)
May 2024
- Adversarial Seas: AI and the Evolving Cyber Threat in Maritime
(MarineLink, May 7th) - Automotive Cybersecurity Tool Launches
(IoT World, May 8th) - A cyberattack took down Metro’s website for two hours. Here’s what a cybersecurity expert says
(NBC-4 Washington, May 14th) - Coast Guard To Empower Maritime Cybersecurity
(AFCEA International, May 31st)
June 2024
- Transit Cybersecurity and Threat and Vulnerability Assessments, Public Transit Risk Assessment Methodology
(Mass Transit, June 4th) - Chinese Automaker Partnership Bolsters Electric Vehicle Cybersecurity
(IoT World Today, June 17th) - Oahu public transportation targeted in cyber attack
(KHON-2 Honolulu, June 18th) - Car dealership outages drag on after CDK cyberattacks
(TechCrunch, June 24th) - Rochester Institute of Technology researchers develop cybersecurity protocols for future smart transportation systems
(RIT, June 25th) - DOD’s network defense arm is working to protect logistics for Transportation Command
(DefenseScoop, June 28th)
July 2024
- The train outta cyber trouble in the smart city
(ERP Today, July 1st) - CISA Adds New Resources to Marine Transportation System Resilience Assessment Guide
(ExecutiveGov, July 3rd) - Transportation a top 10 target of cyberattackers, cases nearly triple last year
(CCJ Digital, July 8th) - WhatsApp Android Users in India Targeted by Regional Transport Office Phishing Scam
(The Cyber Express, July 9th) - New DHS report highlights gaps in cybersecurity efforts of Coast Guard for marine transportation systems
(Industrial Cyber, July 15th) - The Cybersecurity Problem (and Opportunity) in Supply Chain Management
(Talking Logistics, July 18th) - Worldwide tech issue hit Boston’s hospitals and transportation
(WBUR, July 19th)
Note: Not necessarily a cybersecurity issue, but illustrating how interconnected different industries are.
August 2024
- AutoCanada announces fresh cybersecurity breach as earnings hit by previous incident
(Financial Post, August 13th) - Preventing Transportation Industry Cyber Attacks
(Supply & Demand Chain Executive, August 14th) - Transmitting Safety: Taking on the Cybersecurity Threats to Transportation
(Illinois Tech, August 21st) - Federal Aviation Administration (FAA) Proposes Cybersecurity Protections for Certification
(Aviation International News, August 22nd) - Seattle-Tacoma Airport In The Crosshairs Of Hackers
(Forbes, August 25th) - Malaysian public transport operator Prasarana confirms cybersecurity incident
(FMT, August 26th) - Global Cyber Outage Hurt July Airport Traffic
(Urban Milwaukee, August 31st)
September 2024
- Transport for London hit by cyber attack
(Computer Weekly, September 3rd) - 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London
(The Hacker News, September 13th) - Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware
(The Hacker News, September 25th)
October 2024
- Transportation Cybersecurity Handbook
(Industrial Cyber, October 1st) - Sabotage: Protecting European Transportation Networks from Russia
(Center for European Policy Analysis, October 9th) - White House Adviser Addresses Fleets’ Need for Cybersecurity
(Transport Topics, October 29th)
November 2024
- TSA proposes new cybersecurity requirements for some railroads, other transportation systems
(Trains, November 7th) - Managing Cyber Risk With USCG’s New Maritime Security Directive
(The Maritime Executive, November 17th) - Ransomware attack from Russia hits Japan’s biggest port, delaying cargo
(The Straits Times SG, November 18th) - A Cybersecurity Playbook for Trucking in 2025
(Transport Topics, November 22nd) - Keppel Telecommunications and Transportation hit by data breach
(The Straits Times SG, November 25th) - Coast Guard adds new cyber requirements for ship-to-shore cranes
(Federal News Network, November 27th)
December 2024
- TSA Announces Proposed Pipeline, Railroad, Bus Cybersecurity Rules
(The National Law Review, December 4th) - The Defence Forces and the Finnish Transport and Communications Agency started a cyber defence working group
(Finnish Defense Forces, December 19th) - Japan Airlines systems back to normal after cyberattack delayed flights
(Reuters, December 26th)
