In response to federal cybersecurity recommendations, SEPTA has proactively taken some digital tools temporarily offline to install security patches. These tools include real-time travel information and alerts normally available on the SEPTA app, our social media channels, and septa.org.
Real-time information for Bus and Metro is currently available through the Google Maps app and the Transit App (Googe Maps is free; Transit App is subscription-based but has agreed to temporarily remove its paywall to help SEPTA customers). In addition, real-time details about Regional Rail schedules can be found at station monitors and through announcements.
To support SEPTA riders, customer service (215-580-7800) will open at 7 am on Thursday, Oct. 22. Cashiers and passenger services representatives will also be available to assist.
Earlier today, federal cybersecurity officials recommended that organizations using PHP, a programming language, immediately install security updates or temporarily take affected services offline until they can be secured. This advice followed the discovery of a new cybersecurity vulnerability that affects PHP and could allow hackers to gain access to systems through the internet.
At SEPTA, certain website functions including those sharing real-time transit information and the senior fare card registration site, as well as the employee intranet, use PHP; SEPTA is repairing these to safely restore their functionality. The PHP programming language is used by many government agencies across the world, and as a result many government websites globally have similarly removed online services and websites.
We will share updates as soon as they are available.