What Happened?
On or around August 5, 2025, Venezia Transport became aware of unauthorized access to its network. Upon detection, Venezia Transport launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to Venezia Transport’s systems. Venezia Transport conducted a comprehensive review of the impacted data to determine what information was compromised and identified affected individuals. On September 11, 2025, the ransomware gang Akira claimed responsibility for the breach.
On January 9, 2026, Venezia Transport identified persons whose sensitive data was included in the impacted data and began sending out notice letters to the impacted individuals. On January 22, 2025, Venezia Transport filed a notice with the Attorney General of Maine and began notifying impacted individuals.