Permanent project revision

CharlieCard and the AFC 2.0 Fare System Replacement

Revision 2026-08-12-evidence-baseline · effective 2026-08-09

Superseded. A later revision exists: 2026-08-20-source-dates →

unreviewed

Created the first structured Evidence Passport with 12 claims and 18 source dossiers.

sha256:c846cbdd33a34113990566c1fb8dcb75560e4395ccb19be087cb1fb6003109c9

Change set

  • add /evidencePassport — Added claim-level evidence mapping and source dossiers.
  • add /revisionHistory — Established a permanent, hash-addressed baseline revision.
12
of 12 claims mapped
18
source dossiers
9
publication dates recorded
12
archives linked
0
exact locators
0
content captures hashed

Claims, one by one

The text below is copied verbatim from the published record. Each claim names the source dossiers that carry it; caveats stay attached to the claim they qualify.

Claim 1 clm-ef8488b857c40785 quantitative
The MBTA issued its first CharlieCards on 4 December 2006
Published field
snippet · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
Wikipedia records that 'the card was introduced on December 4, 2006, to enhance the technology of the transit system and eliminate the burden of carrying and collecting tokens' — no MBTA page carries the launch date.
Caveat
Tertiary source; the entry's own source note flags that the date should be replaced if an MBTA or MassDOT primary source is found.

Sources carrying this claim

  1. Wikipedia — CharlieCard
Claim 2 clm-f8682281eb1abc55 quantitative
still keeps the balance on the card — the weakness MIT students were sued for describing in 2008 and Medford high-schoolers cloned again in 2023, that time with the agency's help
Published field
snippet · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
GBH quotes the 2023 team that CharlieCards 'still store value directly on the card rather than in a central database somewhere, which would be more secure'; EFF documents the MBTA's 2008 CFAA lawsuit against three MIT students over their DEF CON talk; the Globe places the 2023 group at Medford Vocational Technical High School and records that they told the MBTA how they did it.
Caveat
GBH names the four students but not their school — the Medford attribution rests on the Boston Globe piece.

Sources carrying this claim

  1. GBH News — Four teens hacked the MBTA for free rides. The agency says they're listening (23 August 2023)
  2. Electronic Frontier Foundation — MBTA v. Anderson (case page)
  3. Boston Globe — Some Medford students hacked CharlieCards. Then they told the MBTA how they did it. (1 September 2023)
Claim 3 clm-2f88fc003b7e9829 quantitative
Its replacement, awarded to Cubic for mid-2020, took bank cards in August 2024
Published field
snippet · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
The 2017 award release promised 'full implementation will occur by mid-2020'; the MBTA announced contactless debit and credit cards, phones and watches accepted on buses, Green Line, Mattapan trolleys and at all gated subway stations 'beginning Thursday, August 1, 2024' — four years late.
Caveat
No claim-specific caveat recorded

Sources carrying this claim

  1. MBTA — Fiscal and Management Control Board awards contract to advance AFC 2.0 (20 November 2017)
  2. MBTA — New ways to pay: contactless payments accepted from August 1 (9 July 2024)
Claim 4 clm-232abb715c42ed5c descriptive
Commuter rail still cannot tap.
Published field
snippet · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
The MBTA's own Tap to Ride page says 'contactless payment is available on bus, subway, and ferry' and lists riding the Commuter Rail under 'keep using your typical payment method' — the mode the 2017 award release explicitly promised would tap.
Caveat
Currency claim, re-checked against the live page in August 2026; it will lapse when the commuter-rail phase planned for spring 2026 actually ships.

Sources carrying this claim

  1. MBTA — Tap to Ride
Claim 5 clm-f7f8fab29bfb81cf quantitative
The MBTA awarded the Cubic-John Laing consortium about $723M in November 2017 for full implementation by mid-2020.
Published field
impact · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
The board 'voted to award a multi-year contract to the consortium of Cubic-John Laing' with 'a total program value, for capital and operating costs, of approximately $723 million', and 'full implementation will occur by mid-2020 followed by a retirement of the existing system in 2021.'
Caveat
No claim-specific caveat recorded

Sources carrying this claim

  1. MBTA — Fiscal and Management Control Board awards contract to advance AFC 2.0 (20 November 2017)
Claim 6 clm-f4a86e2575621ff2 quantitative
After the December 2019 reset, which scrapped the planned 'big bang' and added more than $200M
Published field
impact · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
WBUR: the original contract 'called for many of the features to come online in 2020 in a so-called big bang', and 'the updated plan carries more than $200 million in additional costs, including $160 million in new capital.'
Caveat
No claim-specific caveat recorded

Sources carrying this claim

  1. WBUR — MBTA hitting reset on automated fare system rollout (9 December 2019)
Claim 7 clm-8dfef294f76ce6c8 quantitative
the amended contract reached $935.4M and the project $960.2M
Published field
impact · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
FHWA: 'The amended contract totals $935.4 million, including both the full capital cost of the system and a ten-year stream of operations and maintenance payments'; the State Auditor puts the project at an estimated $960.2 million including that contract.
Caveat
Three figures diverge by design — $723M is the 2017 award, $935.4M the amended contract, $960.2M the auditor's whole-project estimate; WBUR's $967M press figure is close but not identical, and the entry deliberately carries the auditor's.

Sources carrying this claim

  1. US DOT Federal Highway Administration — project profile, Massachusetts automated fare collection system
  2. Office of the State Auditor of the Commonwealth of Massachusetts — audit of the MBTA Automated Fare Collection System 2.0 project (16 January 2025)
Claim 8 clm-a4a029088f362c8c quantitative
in May 2024 the board moved full rollout from May 2024 to June 2026 and the contractual longstop from August 2025 to June 2027
Published field
impact · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
WBUR: 'MBTA overseers agreed Thursday to delay the complete rollout across all modes from May 2024 to June 2026, and to push the longstop date — by which every contract condition must be met — from August 2025 to June 2027.'
Caveat
No claim-specific caveat recorded

Sources carrying this claim

  1. WBUR — No CharlieCard required: MBTA rolling out new fare system this summer (23 May 2024)
Claim 9 clm-862cd9e4ce18f264 quantitative
The Massachusetts State Auditor reported on 16 January 2025 that the contract let deadlines be overridden without sufficient controls, and that the MBTA had not obtained the surety bond state law required, so it 'may not be able to recover money it paid for the $935.4 million contract in the event that the contract is not completed.'
Published field
impact · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
The audit finds the Amended and Restated Project Agreement 'allowed deadlines to be overridden' without sufficient controls, and that without the surety bond required by state law 'the MBTA may not be able to recover money it paid for the $935.4 million contract in the event that the contract is not completed.'
Caveat
The audit's review period is 1 January 2018 to 30 September 2023 — its findings predate the 2024 resequencing.

Sources carrying this claim

  1. Office of the State Auditor of the Commonwealth of Massachusetts — audit of the MBTA Automated Fare Collection System 2.0 project (16 January 2025)
Claim 10 clm-9f2c6e85238824da quantitative
it was litigated in 2008 and demonstrated again in 2023 — and it persists because the value sits on the card rather than in a back office
Published field
lesson · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
EFF documents the 2008 CFAA suit, the lifted gag order and the settlement to 'work together to identify and help improve security'; GBH quotes the 2023 team that the cards 'still store value directly on the card rather than in a central database somewhere, which would be more secure.'
Caveat
On how 2008 ended the sources disagree — EFF (counsel to the students) records an effective settlement, while Wikipedia states none is documented and the restraining order simply expired; the entry follows EFF.

Sources carrying this claim

  1. Electronic Frontier Foundation — MBTA v. Anderson (case page)
  2. GBH News — Four teens hacked the MBTA for free rides. The agency says they're listening (23 August 2023)
Claim 11 clm-eba250c1ffc2f936 quantitative
the income-eligible fare launched in September 2024 reached 44,875 riders in its second year
Published field
lesson · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
The MBTA reports 'enrollment reaching 44,875 riders during the FY26 (July 1, 2025 - June 30, 2026) period', about 6% above its own forecast, for the IERF programme 'which launched in September 2024.'
Caveat
Self-reported operator figure — graded official, not independently audited.

Sources carrying this claim

  1. MBTA — Income-Eligible Reduced Fare program continues to grow, serving nearly 45,000 riders (16 July 2026)
Claim 12 clm-767ce35db899e7b4 quantitative
the second-generation card promised for spring 2025 was still listed as coming soon in July 2026
Published field
lesson · verbatim
Mapping
mapped · no interpretation or interpolation added by this passport
What the mapping says
WBUR recorded the May 2024 plan — 'by spring 2025, the MBTA will launch a new CharlieCard system, a mobile app and upgraded fare vending machines' — while the MBTA's own page still files the new Charlie Card and fare vending machines under 'Coming Soon', explaining 'we're introducing the system in phases so we can test new features.'
Caveat
No claim-specific caveat recorded

Sources carrying this claim

  1. WBUR — No CharlieCard required: MBTA rolling out new fare system this summer (23 May 2024)
  2. MBTA — About the new Charlie system

Source dossiers and revision state

This layer records what is known about each source, what is still missing, and the exact snapshot this page is rendering. A missing date, archive or hash stays visible as missing.

unreviewed Revision 2026-08-12-evidence-baseline effective 2026-08-09 · created 2026-08-12

Awaiting operator and domain-expert review; no human review is implied by publication of this baseline.

sha256:c846cbdd33a34113990566c1fb8dcb75560e4395ccb19be087cb1fb6003109c9
12
of 12 claims mapped
18
source dossiers
9
publication dates recorded
12
archives linked
0
exact locators
0
content captures hashed

Governance facts carried by the record

Operator
Massachusetts Bay Transportation Authority (MBTA), with Boston AFC 2.0 OpCo LLC — Cubic Transportation Systems and John Laing — as design-build-finance-operate-maintain concessionaire
Actor types
utility, private
Funding model
ppp
Funding description
Design-build-finance-operate-maintain P3: Boston AFC 2.0 OpCo LLC, formed by Cubic Transportation Systems and John Laing, financed the build with $27.0M equity (John Laing $24.3M, Cubic $2.7M) and a $437.42M senior facility, and is repaid by the MBTA through availability payments over a 13-year concession backed by dedicated sales tax and local assessment revenue
Cost
$935.4M contract, project estimated at $960.2M, up from about $723M at award in 2017
Ownership
Not recorded
Decision rights
Not recorded
Exit conditions
Not recorded

18 source dossiers

MBTA — Fiscal and Management Control Board awards contract to advance AFC 2.0 (20 November 2017) mbta.com · 2 linked claims

Open original source ↗

Stable source ID
src-2b059d4c69c896b0
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
2017-11-20
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2022-08-09
Content hash
No captured content hash
Locator
Open the recorded source note

The operator's own award release and the baseline every later figure is measured against: the board approved 'the consortium of Cubic-John Laing for the design, integration, and implementation' at 'approximately $723 million, which includes operating costs through 2031.' The promise, in the MBTA's words: 'The new system will also allow all-door boarding on the Green Line and on buses', customers 'will be able to pay fares by tapping debit and credit cards', and 'The ability to tap and board the same way on all buses, trains, commuter rail and ferries.' On timing: 'MBTA customers will begin to experience the first elements of the new system late in 2019. Full implementation will occur by mid-2020.'

Descriptive only — not page/paragraph exact
WBUR — MBTA hitting reset on automated fare system rollout (9 December 2019) wbur.org · 1 linked claim

Open original source ↗

Stable source ID
src-a51296ca9f5362ab
Publisher
Name not classified · wbur.org
Type / language
web-page · language not classified
Published
2019-12-09
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-01-03
Content hash
No captured content hash
Locator
Open the recorded source note

The reset, and the load-bearing source for what was postponed rather than cancelled. The original plan was for 'many of the features to come online in 2020 in a so-called big bang and for all-door boarding to begin in 2021'; after the board vote, all-door boarding 'now will not be piloted until three or four years in the future', and tapping a credit card at a fare gate was deferred with it. The revised plan carried 'more than $200 million in additional costs.' General Manager Steve Poftak: 'all three of those assumptions were off, and what we've done here is a course correction.'

Descriptive only — not page/paragraph exact
MBTA — Fare Transformation Program finalizes contract amendment (18 June 2020) mbta.com · background

Open original source ↗

Stable source ID
src-d04425868141338f
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
2020-06-18
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

The amendment itself: it 'incorporates improvements to the original AFC 2.0 contract based on feedback from customers, advocates, and policy makers', gives 'more time for both testing and installation of the new system and for customer migration with a more phased approach', and adds 'agreed-upon schedule milestones and incentives for milestone achievement.' Term: '10 years of operations and maintenance with options for 2 additional 5-year terms.' Also dates the one commuter-rail exception the card ever got: CharlieCard payment at all Zone 1A stations on the Fairmount Line from Monday 22 June 2020. The release gives no dollar figure, which is why the cost is carried from FHWA and the State Auditor instead.

Descriptive only — not page/paragraph exact
Claims linked
Background source; no baseline claim points here
US DOT Federal Highway Administration — project profile, Massachusetts automated fare collection system fhwa.dot.gov · 1 linked claim

Open original source ↗

Stable source ID
src-48ca129fd7d2fb43
Publisher
Name not classified · fhwa.dot.gov
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-04-19
Content hash
No captured content hash
Locator
Open the recorded source note

Federal authority source for the money and the structure: 'The amended contract totals $935.4 million, including both the full capital cost of the system and a ten-year stream of operations and maintenance payments.' Delivery is a 'Design-Build-Finance-Operate-Maintain P3 procurement model; 13-year Availability Payment concession' by Boston AFC 2.0 OpCo LLC, funded through an availability payment drawn on dedicated sales tax and a dedicated local assessment. Financing: $27.00M equity (John Laing $24.3M, Cubic $2.7M) and a $437.42M senior security facility. Also the source for the correction to a common assumption about this programme: the project was 'subsequently expanded in scope in the first half of 2020' — it was stretched and enlarged, not cut back.

Descriptive only — not page/paragraph exact
Office of the State Auditor of the Commonwealth of Massachusetts — audit of the MBTA Automated Fare Collection System 2.0 project (16 January 2025) mass.gov · 2 linked claims

Open original source ↗

Stable source ID
src-e0d0e8d9b3c78aab
Publisher
Name not classified · mass.gov
Type / language
web-page · language not classified
Published
2025-01-16
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

The independent evaluation, covering 1 January 2018 to 30 September 2023. It puts the project at an estimated $960.2 million, 'which includes an approximately $935.4 million contract', and finds the agreement allowed deadlines to be overridden without sufficient controls, risking 'significant delays related to contract delivery' and 'overspending of public funds because of change orders, price escalation because of inflation.' The sharpest finding is the surety bond the MBTA did not obtain as state law required: without it 'the MBTA may not be able to recover money it paid for the $935.4 million contract in the event that the contract is not completed.' Two further findings — a $349,523 payroll variance between HR/CMS and FMIS, and incomplete cybersecurity awareness training — are recorded here but not carried in the entry.

Descriptive only — not page/paragraph exact
WBUR — No CharlieCard required: MBTA rolling out new fare system this summer (23 May 2024) wbur.org · 2 linked claims

Open original source ↗

Stable source ID
src-6f0748ffbc5baf4c
Publisher
Name not classified · wbur.org
Type / language
web-page · language not classified
Published
2024-05-23
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-03-29
Content hash
No captured content hash
Locator
Open the recorded source note

Established press for the 2024 resequencing and the arithmetic of the delay: 'The original $723 million contract called for most features to launch in 2020, but the MBTA amended its agreement in a 2020 reset that pushed the total cost to $967 million', with officials then expecting about $926 million. The board approved a change that 'pushes the complete rollout deadline from May 2024 to June 2026' and the 'longstop date' 'from August 2025 to June 2027.' Phasing as planned at that point: contactless on subway, bus and Green Line in summer 2024; new CharlieCard, app and vending machines in spring 2025; commuter rail and ferries in spring 2026; Mattapan validators later because of a power availability issue. The $967M press figure and the auditor's $960.2M project estimate are close but not identical; the entry uses the auditor's.

Descriptive only — not page/paragraph exact
MBTA — New ways to pay: contactless payments accepted from August 1 (9 July 2024) mbta.com · 1 linked claim

Open original source ↗

Stable source ID
src-ffc80e4f7398f0b3
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
2024-07-09
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-08-03
Content hash
No captured content hash
Locator
Open the recorded source note

Operator source for the date open-loop payment actually arrived: contactless debit and credit cards, phones and watches were accepted onboard buses, Green Line trolleys and Mattapan Line trolleys, and at all gated subway stations, from Thursday 1 August 2024 — four years after the mid-2020 date promised at award.

Descriptive only — not page/paragraph exact
MBTA — Tap to Ride mbta.com · 1 linked claim

Open original source ↗

Stable source ID
src-b50eb3e046c768e9
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-07-09
Content hash
No captured content hash
Locator
Open the recorded source note

The currency check, in the operator's own words in July 2026: 'Contactless payment is available on bus, subway, and ferry', while riders of the commuter rail 'should keep using your typical payment method.' Commuter rail — named in the 2017 award release as part of the promise — is still the mode that cannot tap. Also the source for what open loop does and does not carry: 'Existing transfer rules apply to travel between bus and/or subway with contactless payment.'

Descriptive only — not page/paragraph exact
MBTA — About the new Charlie system mbta.com · 1 linked claim

Open original source ↗

Stable source ID
src-d131f969a129911f
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2025-12-18
Content hash
No captured content hash
Locator
Open the recorded source note

The second currency check. In July 2026 the page lists the new Charlie Card and Charlie fare vending machines under 'Coming Soon', not as available — the components the May 2024 plan put in spring 2025. The MBTA's framing: 'We're introducing the system in phases so we can test new features.' The page describes signing up for a Charlie Account 'to manage the cards and devices you use to pay your fare' but does not state that the new system is account-based, which is why the entry does not claim it.

Descriptive only — not page/paragraph exact
MBTA — CharlieCard mbta.com · background

Open original source ↗

Stable source ID
src-73f8858502496d8a
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

Operator source for what the card costs and what it covers: 'You can get a free, blank CharlieCard at these locations', distributed through fare vending machines, city halls, libraries, Boys and Girls Clubs, retailers and the Charlie Service Center. Cards do expire — 'CharlieCard expiration dates are located on the lower right-hand corner, across from the serial number' — but there is no purchase fee and no forfeited deposit, unlike Manila's beep. Coverage: 'Not valid on Commuter Rail or ferry, except for the Fairmount Line.'

Descriptive only — not page/paragraph exact
Claims linked
Background source; no baseline claim points here
MBTA — fares overview mbta.com · background

Open original source ↗

Stable source ID
src-589819686b5e6cb3
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

Establishes the absence that the comparison needs. In July 2026 the MBTA still sells a 1-Day Pass at $11.00, a 7-Day Pass at $22.50 and a monthly LinkPass at $90.00, and no fare-capping product appears anywhere in its fare material. Boston therefore sits with Chicago rather than with Los Angeles, which abolished passes for automatic caps in July 2023. Single fares as listed: subway $2.40, local bus $1.70, commuter rail $2.40-$13.25 by zone, ferry $2.40-$9.75 by route.

Descriptive only — not page/paragraph exact
Claims linked
Background source; no baseline claim points here
Electronic Frontier Foundation — MBTA v. Anderson (case page) eff.org · 2 linked claims

Open original source ↗

Stable source ID
src-14103980fbb79b7d
Publisher
Name not classified · eff.org
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-06-07
Content hash
No captured content hash
Locator
Open the recorded source note

How the 2008 case ended, from counsel to the students: 'EFF represented the students in this matter and effectively settled the case', linking a 22 December 2008 release recording that the parties 'agreed to work together to identify and help improve security in the MBTA's Automated Fare Collection System' following dismissal of the federal lawsuit. Flagged conflict: the Wikipedia article states no settlement or formal dismissal is documented and that the restraining order simply expired. The entry follows EFF, which was a party.

Descriptive only — not page/paragraph exact
Wikipedia — Massachusetts Bay Transportation Authority v. Anderson en.wikipedia.org · background

Open original source ↗

Stable source ID
src-57d9b7b0af0c9399
Publisher
Name not classified · en.wikipedia.org
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

Tertiary, used for the procedural spine only. The MBTA sued Zack Anderson, Russell J. Ryan and Alessandro Chiesa on 8 August 2008, alleging under the Computer Fraud and Abuse Act that they 'transmitted programs to cause damage to (or attempted to transmit and damage) MBTA computers in an amount in excess of $5,000.' Judge Douglas P. Woodlock granted a temporary restraining order on 9 August barring the DEF CON 16 presentation; Judge George A. O'Toole Jr. declined to extend it on 19 August 2008. The order was also self-defeating: the slides had already gone to conference organisers and appeared on the court's own public docket.

Descriptive only — not page/paragraph exact
Claims linked
Background source; no baseline claim points here
GBH News — Four teens hacked the MBTA for free rides. The agency says they're listening (23 August 2023) wgbh.org · 2 linked claims

Open original source ↗

Stable source ID
src-f90a784b6876a9f4
Publisher
Name not classified · wgbh.org
Type / language
web-page · language not classified
Published
2023-08-23
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-04-18
Content hash
No captured content hash
Locator
Open the recorded source note

The load-bearing source for the claim that the underlying weakness survived the lawsuit. Matty Harris, Scott Campbell, Noah Gibson and Zack Bertocchi found the cards still 'store monetary value directly on the card itself rather than in a central database.' Harris on the state of it fifteen years on: 'it's kind of exactly the same way it was 15 years ago.' Campbell on the exploit, after cracking the checksum at the end of each data line: 'we were able to exploit that and actually edit the values... change the variable that contains the money so we can have a card with any amount of money we want up to like $300.' The institutional change is the other half of the story: the students went to MBTA chief information security officer Scott Margolis in January 2023, and the DEF CON talk went ahead with the agency's cooperation rather than a court order.

Descriptive only — not page/paragraph exact
DEF CON 31 — Boston Infinite Money Glitch: hacking transit cards without ending up in handcuffs (August 2023) infocondb.org · background

Open original source ↗

Stable source ID
src-48fabdf97e1c6554
Publisher
Name not classified · infocondb.org
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
No archived copy linked
Content hash
No captured content hash
Locator
Open the recorded source note

Conference-archive listing confirming the talk, its title and its four speakers. The title is itself the comparison with 2008. Archive listing only, not a technical source; the vulnerability description in this entry comes from GBH.

Descriptive only — not page/paragraph exact
Claims linked
Background source; no baseline claim points here
Boston Globe — Some Medford students hacked CharlieCards. Then they told the MBTA how they did it. (1 September 2023) bostonglobe.com · 1 linked claim

Open original source ↗

Stable source ID
src-f5e2a54e46827bcc
Publisher
Name not classified · bostonglobe.com
Type / language
web-page · language not classified
Published
2023-09-01
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2025-07-24
Content hash
No captured content hash
Locator
Open the recorded source note

Independent corroboration of the 2023 episode from the city's paper of record. Paywalled; headline, date and subject confirmed at search level, body not read. Carried only as a second outlet on a story whose facts come from GBH.

Descriptive only — not page/paragraph exact
MBTA — Income-Eligible Reduced Fare program continues to grow, serving nearly 45,000 riders (16 July 2026) mbta.com · 1 linked claim

Open original source ↗

Stable source ID
src-32d4e61754f32255
Publisher
Name not classified · mbta.com
Type / language
web-page · language not classified
Published
2026-07-16
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-08-03
Content hash
No captured content hash
Locator
Open the recorded source note

Operator source for the entry's only rider-facing number, and the freshest source in the file. Enrolment reached 44,875 riders in FY26 (1 July 2025 to 30 June 2026), about 6% above the MBTA's own forecast, with roughly 95% of participants enrolling online. The programme launched on 4 September 2024 for riders aged 18-64 enrolled in an approved state assistance programme, with discounts of roughly 50% to 67% across bus, subway, commuter rail, ferry and The RIDE — a wider footprint than the CharlieCard itself has. Self-reported, so graded official, not independent.

Descriptive only — not page/paragraph exact
Wikipedia — CharlieCard en.wikipedia.org · 1 linked claim

Open original source ↗

Stable source ID
src-a8197b5a55af9b5f
Publisher
Name not classified · en.wikipedia.org
Type / language
web-page · language not classified
Published
Not recorded
Updated
Not recorded
Source last checked
No source-level check date
Record last verified
2026-08-09
Dossier created
2026-08-12
Retrieved copy
No local capture recorded
Archive
Open archived copy ↗ · 2026-06-06
Content hash
No captured content hash
Locator
Open the recorded source note

Tertiary, and used only where no operator page carries the fact: 'The card was introduced on December 4, 2006', and the original system runs on MIFARE Classic contactless chips. Also records that early cards expired three to five years after activation and later versions run ten years, which the MBTA's own page corroborates in principle by printing an expiry date on the card. The launch date should be replaced if an MBTA or MassDOT primary source is found.

Descriptive only — not page/paragraph exact
Known limits of this passport
  • Publisher names and source languages have not yet been classified; domains are recorded without guessing.
  • Existing source notes are descriptive locators, not page- or paragraph-exact citations.
  • A missing archive, publication date or content hash is shown as null rather than inferred.
  • The project-level evidence grade ranks the strongest source in the entry; it is not a truth score for every claim.