Skip to agency navigation
Skip to main content

Official website

of the Commonwealth of Pennsylvania

    The .gov means it's official.

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    PennDOT Cybersecurity Task Force

    These pages provide cybersecurity resources for employees and associates of Pennsylvania transit authorities, and is managed by the Bureau of Public Transportation. Herein you will find written guides, videos, links, and other information to help your agency/authority and its members build, maintain, and respond to cybersecurity-related topics including best practices, preparedness guides, audit materials, crisis resources and instructions, current threats and concerns, and everything else you need to build a robust cybersecurity practice in your organization. 

    If You Are A Transit Agency Experiencing An Active Cyberattack

    1. Activate your Incident Response Plan (IRP). If you don't have an IRP, reference the IRP template
    2. Contact PA CyberCom (833.707.3843 or PACyberCom@pa.gov)
    3. Contact your cyber insurance carrier
    4. If you suspect a data breach, ensure you are complying with the notification requirements associated with Pennsylvania's Breach of Personal Information Notification Act (“BPINA”)
    5. File report with FBI IC3
    6. Contact Bureau of Public Transportation (717.783.8025 or RA-PDPublicTransport@pa.gov)

    Recent Updates

    7/22/26: In response to an ongoing Cybersecurity Advisory issued by CISA, the FTA published Safety Bulletin SB 26-02.