The offender, still unidentified, had access to names and surnames, balance information and, presumably, the security of the service, although the purpose of the attack is also unknown.
The Municipal Transport Company (EMT), dependent on the Environment and Mobility Area and in charge of managing bicycle rentals, reported the events to the Police that same day, in addition to taking measures to correct possible vulnerabilities in the network.
The attack through the Wi-Fi of 8 stations
The intrusion was made through the Wi-Fi of eight stations and was detected because on the screens installed at street level a series of unusual letters and in no order or sense.
Municipal sources detailed that although the "hacker" did was able to access the balance of each of the accounts, but no to bank transactions, so in principle the theft is ruled out
Discarded the economic damage to users, however, there was direct damage to the system and to the municipal coffers, taking into account the costs associated with hours of work, operation and equipment.
From the Environment and Mobility they indicate that at the moment they do not know the amount of these inconveniences and that it is still to be valued, as well as their commitment to report the news of the case in the different channels.
The police investigation is now focused on determining who is behind this attack on Bicimad's software and what the criminal's claims were. Beyond these investigations, the EMT has proceeded to shutdown the system to guarantee the security of the data.
This operation, which will last a week, explains the problems of the users in the last days. Thus, the bicycle rental will continue to operate, but they will not be able to recharge their balance or register new clients.
The Department of Environment and Mobility, which Borja Carabante directs, points out to ABC that the events are an example that the municipalization of Bicimad by Manuela Carmena was carried out "without auditing the contracts and systems", a process that, according to what they defend, it would have allowed to detect failures of this type.