The hackers used security flaws in the MTA’s remote working application, Pulse Secure. The agency said the attack hit three of its 18 systems but didn’t affect operations.
The biggest U.S. transit system uncovered the breach by Chinese-linked hackers in April.