Cyber-security incident takes down Traficom passenger-transport portals in Southwest Finland

Finland’s Transport and Communications Agency (Traficom) reported at 16:13 local time on 21 October 2026 that several of its web services, including the Seutu+ regional ticketing platform used in Varsinais-Suomi and Satakunta, have been taken offline “as a precaution” following the detection of a cyber-intrusion. Seutu+ processes hundreds of thousands of bus and commuter-ferry journeys per day and is integrated with the national Waltti smart-card system. The outage prevents users from topping up travel cards, purchasing single tickets online or registering student discounts. Physical sales points continue to operate, but queues formed quickly at Turku’s main bus station on Wednesday afternoon. Traficom says no payment data has been compromised and expects to restore normal operations within 24 hours, yet the agency has temporarily suspended automatic penalty fees for travellers unable to validate digital tickets. Employers with commuter-benefit programmes should advise staff to keep receipts for paper tickets to claim reimbursement. The incident is Finland’s third transport-sector cyber-event in six months after disruptions at VR’s online booking site in July and a ransomware attempt against Finavia’s parking portal in September. Mobility managers should review contingency plans and ensure that employees retain at least one offline payment option when travelling within Finland. A post-mortem report will be published next week and is likely to inform Traficom’s ongoing project to migrate all ticketing APIs to a zero-trust architecture by 2028.