Transport for London cyber-attack

Transport for London (TfL) is the organisation responsible for public transport in the London area, including bus, underground and commuter services, with 8.4 million users. Since September 2nd, it has been suffering a cyber-attack that is still ongoing, as reported by TfL on its X account and on its website.

Although the extent is unknown, as the incident is still ongoing, a preliminary investigation suggests that no data leaks have occurred, while transport services have remained normal. This attack appears to have targeted the organisation's internal infrastructure, as according to the BBC, which has interviewed TfL employees, they have been told to telework if possible, while TfL is working with the National Crime Agency and the National Cyber Security Centre to address the problem.

This news comes shortly after TfL confirmed that the contact details of 13,000 users were stolen in May 2023 when one of its MOVEit providers was attacked by the Cl0p ransomware gang.