Local
SEPTA brings rider-tracking services back after cybersecurity shutdown
SEPTA restored its real-time travel tools Thursday after taking them offline to install security patches for a newly identified PHP vulnerability. Riders could still check bus and Metro updates through Google Maps and the Transit app during the disruption.
SEPTA restored real-time travel information on its website and app Thursday after temporarily taking the services offline while installing security updates, the transit agency said.
The shutdown followed federal cybersecurity recommendations related to a newly identified vulnerability in PHP, a programming language used by SEPTA’s online systems. The flaw could allow hackers to access systems over the internet, prompting PHP users to install patches or take affected services offline until they are secured.
The interruption affected real-time travel information and alerts normally available through SEPTA’s app, website and social media channels. SEPTA said functions including senior fare card registration and its employee intranet also rely on PHP.
Bus and Metro arrival information remained available through Google Maps and the Transit app. Regional Rail riders could get schedule information from station monitors and announcements, according to the agency. SEPTA’s customer service line, 215-580-7800, opened at 7 a.m. Thursday to assist riders.
The vulnerability prompted government agencies and other organizations around the world to take some PHP-based websites and services offline while applying security updates.