Metro-North employees' personal info accessed in Kronos hack: officials

MTA
Photo credit Jeenah Moon/Bloomberg via Getty Images

NEW YORK (WCBS 880) -- Metro-North employees were among those whose personal info was exposed after hackers got into the network of Kronos, which provides timeclock services for the MTA.

Live On-Air
W C B S Eight Eighty
WCBS Newsradio 880
Listen Now
Now Playing
Now Playing

MTA Chief of External Relations John McCarthy told WCBS 880 in a statement that the hackers accessed files with info like names and dates of birth of current and former Metro-North employees, but no further than that.

“To date, Kronos has found no evidence that personal information of employees from any other MTA agency was accessed,” McCarthy said.

The Kronos ransomware hack resulted in a systemwide outage that affects 2,000 clients with about 40 million employees. Kronos went into use by the MTA about two years ago, utilizing fingerprint tech to swipe in and out.

MTA officials said they were making sure Kronos would be able to safeguard agency data going forward, and said all employees will be offered two years of free credit monitoring and ID theft protection from Kronos.

“Both the MTA and Kronos continue to investigate the scope of the Kronos ransomware incident’s impact on the MTA, however the MTA has taken initial steps to enforce its legal rights,” the statement said.

McCarthy added that Kronos is planning to introduce more robust monitoring programs to detect cyberthreats.

"The MTA will monitor Kronos’ progress and continue to require affirmative steps be taken to address the regrettable impact of the current cybersecurity attack," McCarthy concluded.