The cyber attack that hit Transport for London a week ago is much worse than first thought, TfL admitted on Thursday afternoon as it was revealed a teenager has been arrested in connection with the hack.Names and phone numbers of passengers are thought to have been obtained, including some personal data from Oyster cards and Contactless bank cards used to make journeys on the capital’s public transport network.The hack is understood to have potentially exposed the bank account details of about 5,000 passengers - either via activity on their Oyster card account or refund data. This includes account numbers and sort codes.In addition, an unknown number of passengers who had signed up to TfL email alerts – for example, for regular email bulletins on the Elizabeth line or a particular Tube line – are thought to have had their name, home address or email account exposed.
Category
🗞
NewsTranscript
00:00London's transport network, which serves 4 million passengers every day, has suffered
00:06a major data breach.
00:09You may recall that TfL was hacked over the weekend, but it didn't send too many alarm
00:14bells ringing at the time as they didn't believe any customer data was breached. Or so we thought.
00:21Now London's public transport network is warning that names, phone numbers and even banking
00:27details may have been taken.
00:30A 17-year-old from Walsall has been arrested on suspicion of the attack and the National
00:34Crime Agency is investigating the breach.
00:38TfL have said it is a limited number of customers that have potentially had their bank details
00:43breached. They say the hack accessed Oyster Card refund data. This amounts to around 5,000
00:51customers who they will be contacting directly.
00:55Transport for London warn that the hack could have wider implications too. They say temporary
01:00and limited disruption could be possible on some services and there will be a pause to
01:06the rollout of contactless train travel outside of London.
01:11TfL say that they will keep customers and staff updated throughout the investigation
01:17and apologise for any inconvenience.