SFMTA says office computers are being restored following a ransomware attack over the weekend. The agency responsible for MUNI says IT teams are in the middle of their BC/DR recovery process this morning. The attack leveraged hard drive encrypting malware that targets a disks boot record, meaning that recovery often centers on re-imaging the systems and then recovering data form backups. The attacker claimed that 30GBs of data was compromised during the attack. Muni operations and safety were not affected, and no data was accessed from any of our servers.”]