Cyber Attack on Maryland: Data for Bitcoin on the Black Market

The Maryland Department of Transportation has fallen victim to a cyberattack in which sensitive data was stolen and is now being offered on the black market. A hacker collective called Rhysida Ransomware is reportedly demanding approximately 30 Bitcoin for the stolen information, equivalent to around 3.4 million US dollars. According to information from *Dark Web Daily*, the stolen data includes personal information such as social security numbers, addresses, and birthdates. The data is expected to be sold to a single interested party within the next seven days. The Maryland Department of Transportation has confirmed the loss of data-related incidents involving unauthorized access to its systems and is currently investigating the incident. Users and employees of the transportation authority have been urged to take measures such as changing passwords and enabling two-factor authentication to mitigate potential consequences. The incident is part of a larger trend where cryptocurrencies like Bitcoin are used by ransomware operators as a means of payment since they are harder to trace compared to traditional payment methods. The Cybersecurity and Infrastructure Security Agency (CISA) reports that Rhysida has been operating since at least 2023 and primarily targets sectors such as education, healthcare, manufacturing, information technology, and government. In July, justice authorities attempted to seize Bitcoin worth 2.3 million US dollars in connection with ransomware attacks, and Texas authorities were also looking for similar amounts. Payments to ransomware attackers amounted to approximately 813 million US dollars in 2024, representing a 35% decrease from the record high of 1.25 billion US dollars in 2023.