Cybersecurity Incident Disrupts Maryland Transit Administration Operations

BALTIMORE, Aug. 25, 2025 - The Maryland Transit Administration (MTA) today confirmed that a cybersecurity breach has impacted key administrative systems, disrupting certain Mobility paratransit services while core transit operations continue uninterrupted.

According to MTA officials, unauthorized actors gained access to internal scheduling systems used for Mobility and Call-A-Ride reservations. Although Local Bus, Metro Subway, Light Rail, MARC Train, and Commuter Bus services remain fully operational, the agency has temporarily suspended new trip bookings and rebookings for its paratransit program. All previously scheduled Mobility trips for the week will be honored, MTA representatives emphasized in a statement.

“Upon detecting the incident, our cybersecurity teams immediately took action to investigate, contain the threat, and secure our network,” the agency said. However, riders relying on paratransit are advised to consider alternative arrangements for urgent medical needs by contacting healthcare providers or, in emergencies, dialing 911. Eligible customers may also use Call-A-Ride at www.mtacallaride.org or by calling (410) 664-2030.

In addition, several real-time information systems-including train arrival and departure displays and call-center support lines-are experiencing intermittent disruptions. The MTA urged all passengers, particularly students returning for the first day of school, to allow extra travel time and arrive early at stations and pick-up locations.

Maryland’s Department of Information Technology and external cybersecurity consultants, alongside law enforcement partners, are collaborating with the MTA to assess the full scope and origin of the breach. “We will provide updates as more information becomes available,” the MTA pledged, noting that the investigation remains ongoing.