Santa Clara Valley Transportation Authority (VTA) reported a cybersecurity incident where systems were made inaccessible starting March 25, 2021, discovered on April 17, 2021. An unknown actor accessed systems, potentially exfiltrating employee data including SSNs, bank info, and medical records. VTA engaged forensic specialists and law enforcement, offering 12 months of Experian identity monitoring. The filing is a supplemental notice.