Ransomware Group Targets LA Metro, Threatens Data Leak

The Gentlemen ransomware group has claimed responsibility for targeting the Los Angeles County Metropolitan Transportation Authority (LA Metro), listing it on their dark web leak site on September 7, 2026. The group has given LA Metro a nine-day deadline to respond, but no data samples have been released yet, leaving the nature of the compromised data unconfirmed. Given LA Metro's extensive operations, which include managing ticket sales for approximately 12.9 million riders, the potential impact on passenger data could be significant. This incident marks the second attack on LA Metro in 2026, following a previous breach in March where 700 gigabytes of internal data were stolen. The transportation sector has increasingly become a target for cyberattacks, with notable incidents affecting other agencies in recent years.

Key Points: • The Gentlemen ransomware group has targeted LA Metro, demanding a response within nine days. • No data samples have been released, leaving the scope of the breach unclear. • This is the second cyberattack on LA Metro in 2026, following a major breach in March.