Skip to content

Cyber Attack Hits TfL, Disrupts Services and Compromises Customer Data

TfL services disrupted by cyber attack. Customer data, including bank details, may have been accessed. Find out what's affected and how to stay informed.

In the picture there is a data card connected to a laptop.
In the picture there is a data card connected to a laptop.

Cyber Attack Hits TfL, Disrupts Services and Compromises Customer Data

Transport for London (TfL) has been targeted in a cybersecurity attack, leading to disruptions in services and limited access to customer data. The incident was discovered on Sunday 1 September, prompting immediate action from TfL to restrict data access.

The attack has caused several inconveniences for users. Live Tube arrival information is currently unavailable on some digital channels, and contactless payment card users cannot access their online journey history. Around 5,000 Oyster card refund data, including bank account numbers and sort codes, may have been accessed. TfL is working with the National Crime Agency and the National Cyber Security Centre to investigate the incident thoroughly.

TfL has temporarily suspended applications for new Oyster photocards, including Zip cards, as a precautionary measure. The Information Commissioner’s Office (ICO), the UK's independent data protection authority, is also looking into the matter to determine if there has been a breach of the General Data Protection Regulation (GDPR).

TfL is committed to keeping the public updated on the progress of the investigation and any restoration of affected services. Customers are advised to monitor TfL's official channels for the latest information.

Read also:

Latest