{"id":46915,"date":"2022-04-27T16:23:00","date_gmt":"2022-04-27T10:53:00","guid":{"rendered":"https:\/\/arcon.xyz\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/"},"modified":"2026-04-06T15:58:20","modified_gmt":"2026-04-06T10:28:20","slug":"critical-it-infrastructure-time-to-push-the-alert-button","status":"publish","type":"risk-to-watch","link":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/","title":{"rendered":"Critical IT Infrastructure: Time to Push the Alert Button"},"content":{"rendered":"<p><b>Overview<\/b><\/p>\n<p><span style=\"font-weight: 400;\">It is not uncommon that critical systems are often targeted by cyber criminals. And <\/span><a href=\"\/risks-to-watch\/would-you-still-ignore-endpoint-privilege-management\/\" data-wplink-edit=\"true\"><span style=\"font-weight: 400;\">we have documented it<\/span><\/a> <span style=\"font-weight: 400;\">from time to time. But this time the attack was on toll collection systems.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Indeed, gone are those days when you take out your wallet to pay highway tolls while driving through the city suburbs. Today the latest technologies are adopted at the highway tolls for making the payment process fast and easy. With the help of the Radio Frequency Identification (RFID) technology, toll payments are made directly while the vehicle is in motion. A device is affixed on the windscreen of the vehicle that helps to make the toll payments directly from the bank account that is linked to it.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">But what about the security of the bank account that is connected to the RFID technology? What amount of security risks lie with the personal information associated with it?\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Recently, an electronic toll collection system in Puerto Rico faced a cyber attack. Run by a private operator, the incident could not confirm whether there was any information misuse. However, such incidents can bear the risk of data theft and even subsequent financial losses. Previously, in 2021, another similar incident in the same country resulted in face-loss of the government agency with a financial loss of around $4million.<\/span><\/p>\n<p><b>How do the risks amplify?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Toll system hacks can happen during any stage of the registration process. Typically, the process starts online by submitting private user details such as name, age, address, vehicle details, social security number (PAN Card) and bank account number. Once the user details are verified and authenticated by the authorized body, the bank account is integrated for toll pass deduction.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Now, this entire process happens at the toll stops which occasionally lures the drivers\/ car owners to use the free public Wi-Fi to complete the task. It offers a golden opportunity for the hackers and organized cyber criminal groups to misuse a compromised network and\/or poor access controls around systems.\u00a0<\/span><\/p>\n<p><b>Some Thoughts to Avert such Threats<\/b><\/p>\n<ul>\n<li><b><i>Prevention of Physical Threats<\/i><\/b><span style=\"font-weight: 400;\">: The Information Technology devices used for electronic tolls are vulnerable to misuse or abuse from insiders and organized cyber criminals. With no supervisor around, it could be a cakewalk for the criminals to physically access the toll management system, and do modifications in the systems and configurations, and exploit system vulnerabilities to launch cyber attacks. While CCTV cameras can ensure security to some extent, a robust password management across devices and services can provide an added security layer to prevent unauthorized access.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b><i>Prevention of Insider and Third Party Threats<\/i><\/b><span style=\"font-weight: 400;\">: Malicious third-party actors or organized cyber criminal groups can wreak havoc. There is a huge risk that the malicious actors could misuse the poorly protected toll systems to access the service providers\u2019 entire network infrastructure. As preventive measures, there should be a systematic segregation of the identities that access the toll systems and access the databases. A robust <\/span><a href=\"https:\/\/arconnet.com\/products\/identity-and-access-management\/\"><span style=\"font-weight: 400;\">Identity and Access management system<\/span><\/a><span style=\"font-weight: 400;\"> with password vault can prevent anomalous activities.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b><i>PCI DSS Compliance<\/i><\/b><span style=\"font-weight: 400;\">: Quite frequently tolls accept credit\/ debit cards for payment. As a result, they need to meet <\/span><a href=\"https:\/\/arconnet.com\/solutions\/by-compliance\/pci-dss-compliance\"><span style=\"font-weight: 400;\">Payment Card Industry Data Security Standard (PCI DSS)<\/span><\/a><span style=\"font-weight: 400;\"> compliance mandates. The toll systems that depend on third party service providers to store and manage the critical information accumulated daily are susceptible to data breaches. Compliance with PCI DSS mandates help to keep the payment card environment safe and secure.\u00a0<\/span><\/li>\n<\/ul>\n<p><b>The Bottom-line<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As highway tolls are consistently operational, it is gradually getting vulnerable to cyber threats. A few stray incidents are a red signal to the government agencies to take adequate and necessary precautions beforehand, else thousands of users could face digital identity thefts and financial losses.\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview It is not uncommon that critical systems are often targeted by cyber criminals. And we have documented it from time to time. But this time the attack was on toll collection systems.\u00a0 Indeed, gone are those days when you take out your wallet to pay highway tolls while driving through the city suburbs. Today [&hellip;]<\/p>\n","protected":false},"author":40,"featured_media":47364,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46915","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47364,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"How do the risks amplify?","item_name":"How do the risks amplify?"},{"id":"Some Thoughts to Avert such Threats","item_name":"Some Thoughts to Avert such Threats"},{"id":"The Bottom-line","item_name":"The Bottom-line"}],"contents":[{"id":"Overview","title":"Overview","content":"It is not uncommon that critical systems are often targeted by cyber criminals. And\u00a0<a href=\"\/risks-to-watch\/would-you-still-ignore-endpoint-privilege-management\/\">we have documented it<\/a>\u00a0from time to time. But this time the attack was on toll collection systems.\r\n\r\nIndeed, gone are those days when you take out your wallet to pay highway tolls while driving through the city suburbs. Today the latest technologies are adopted at the highway tolls for making the payment process fast and easy. With the help of the Radio Frequency Identification (RFID) technology, toll payments are made directly while the vehicle is in motion. A device is affixed on the windscreen of the vehicle that helps to make the toll payments directly from the bank account that is linked to it.\r\n\r\nBut what about the security of the bank account that is connected to the RFID technology? What amount of security risks lie with the personal information associated with it?\r\n\r\nRecently, an electronic toll collection system in Puerto Rico faced a cyber attack. Run by a private operator, the incident could not confirm whether there was any information misuse. However, such incidents can bear the risk of data theft and even subsequent financial losses. Previously, in 2021, another similar incident in the same country resulted in face-loss of the government agency with a financial loss of around $4million."},{"id":"How do the risks amplify?","title":"How do the risks amplify?","content":"Toll system hacks can happen during any stage of the registration process. Typically, the process starts online by submitting private user details such as name, age, address, vehicle details, social security number (PAN Card) and bank account number. Once the user details are verified and authenticated by the authorized body, the bank account is integrated for toll pass deduction.\r\n\r\nNow, this entire process happens at the toll stops which occasionally lures the drivers\/ car owners to use the free public Wi-Fi to complete the task. It offers a golden opportunity for the hackers and organized cyber criminal groups to misuse a compromised network and\/or poor access controls around systems."},{"id":"Some Thoughts to Avert such Threats","title":"Some Thoughts to Avert such Threats","content":"<ul>\r\n \t<li><b><i>Prevention of Physical Threats<\/i><\/b>: The Information Technology devices used for electronic tolls are vulnerable to misuse or abuse from insiders and organized cyber criminals. With no supervisor around, it could be a cakewalk for the criminals to physically access the toll management system, and do modifications in the systems and configurations, and exploit system vulnerabilities to launch cyber attacks. While CCTV cameras can ensure security to some extent, a robust password management across devices and services can provide an added security layer to prevent unauthorized access.<\/li>\r\n \t<li aria-level=\"1\"><b><i>Prevention of Insider and Third Party Threats<\/i><\/b>: Malicious third-party actors or organized cyber criminal groups can wreak havoc. There is a huge risk that the malicious actors could misuse the poorly protected toll systems to access the service providers\u2019 entire network infrastructure. As preventive measures, there should be a systematic segregation of the identities that access the toll systems and access the databases. A robust\u00a0Identity and Access management system\u00a0with password vault can prevent anomalous activities.<\/li>\r\n \t<li aria-level=\"1\"><b><i>PCI DSS Compliance<\/i><\/b>: Quite frequently tolls accept credit\/ debit cards for payment. As a result, they need to meet\u00a0<a href=\"\/pci-dss\/\">Payment Card Industry Data Security Standard (PCI DSS)<\/a>\u00a0compliance mandates. The toll systems that depend on third party service providers to store and manage the critical information accumulated daily are susceptible to data breaches. Compliance with PCI DSS mandates help to keep the payment card environment safe and secure.<\/li>\r\n<\/ul>"},{"id":"The Bottom-line","title":"The Bottom-line","content":"As highway tolls are consistently operational, it is gradually getting vulnerable to cyber threats. A few stray incidents are a red signal to the government agencies to take adequate and necessary precautions beforehand, else thousands of users could face digital identity thefts and financial losses."}],"form_shortcode":"","choose_asset_type":"files","links":"","files":"","pardot_redirect_url":"","video_link":""}]},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Critical IT Infrastructure: Time to Push the Alert Button - ARCON<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Critical IT Infrastructure: Time to Push the Alert Button - ARCON\" \/>\n<meta property=\"og:description\" content=\"Overview It is not uncommon that critical systems are often targeted by cyber criminals. And we have documented it from time to time. But this time the attack was on toll collection systems.\u00a0 Indeed, gone are those days when you take out your wallet to pay highway tolls while driving through the city suburbs. Today [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/\" \/>\n<meta property=\"og:site_name\" content=\"ARCON\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-06T10:28:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/Highway-Tolls_RTW-1-1024x455-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"455\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/\",\"name\":\"Critical IT Infrastructure: Time to Push the Alert Button - ARCON\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Highway-Tolls_RTW-1-1024x455-1.jpeg\",\"datePublished\":\"2022-04-27T10:53:00+00:00\",\"dateModified\":\"2026-04-06T10:28:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/#primaryimage\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Highway-Tolls_RTW-1-1024x455-1.jpeg\",\"contentUrl\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Highway-Tolls_RTW-1-1024x455-1.jpeg\",\"width\":1024,\"height\":455},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/critical-it-infrastructure-time-to-push-the-alert-button\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Risk To Watch\",\"item\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Critical IT Infrastructure: Time to Push the Alert Button\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/#website\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/\",\"name\":\"ARCON\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Critical IT Infrastructure: Time to Push the Alert Button - ARCON","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Critical IT Infrastructure: Time to Push the Alert Button - ARCON","og_description":"Overview It is not uncommon that critical systems are often targeted by cyber criminals. And we have documented it from time to time. But this time the attack was on toll collection systems.\u00a0 Indeed, gone are those days when you take out your wallet to pay highway tolls while driving through the city suburbs. Today [&hellip;]","og_url":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/","og_site_name":"ARCON","article_modified_time":"2026-04-06T10:28:20+00:00","og_image":[{"width":1024,"height":455,"url":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/Highway-Tolls_RTW-1-1024x455-1.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/","url":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/","name":"Critical IT Infrastructure: Time to Push the Alert Button - ARCON","isPartOf":{"@id":"https:\/\/arcon.xyz\/staging01\/#website"},"primaryImageOfPage":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/#primaryimage"},"image":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/#primaryimage"},"thumbnailUrl":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/Highway-Tolls_RTW-1-1024x455-1.jpeg","datePublished":"2022-04-27T10:53:00+00:00","dateModified":"2026-04-06T10:28:20+00:00","breadcrumb":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/#primaryimage","url":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/Highway-Tolls_RTW-1-1024x455-1.jpeg","contentUrl":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/Highway-Tolls_RTW-1-1024x455-1.jpeg","width":1024,"height":455},{"@type":"BreadcrumbList","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/critical-it-infrastructure-time-to-push-the-alert-button\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/arcon.xyz\/staging01\/"},{"@type":"ListItem","position":2,"name":"Risk To Watch","item":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/"},{"@type":"ListItem","position":3,"name":"Critical IT Infrastructure: Time to Push the Alert Button"}]},{"@type":"WebSite","@id":"https:\/\/arcon.xyz\/staging01\/#website","url":"https:\/\/arcon.xyz\/staging01\/","name":"ARCON","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/arcon.xyz\/staging01\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch"}],"about":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/types\/risk-to-watch"}],"author":[{"embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/users\/40"}],"version-history":[{"count":9,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46915\/revisions"}],"predecessor-version":[{"id":50834,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46915\/revisions\/50834"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/media\/47364"}],"wp:attachment":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/media?parent=46915"}],"wp:term":[{"taxonomy":"risk-categories","embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-categories?post=46915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}