A 17-year-old boy was arrested in connection with a cyberattack on Transport for London (TfL). The attack resulted in the bank data of about 5,000 customers being compromised. The investigation is ongoing.

Important findings

  • Arrest: A 17-year-old boy was arrested in Walsall, West Midlands.
  • Affected data: Names, emails, addresses and banking data of customers were compromised.
  • Investigation: The NCA and the NCSC are working with TfL to investigate the incident.
  • Customer notification: Affected customers are contacted directly.

The incident

On September 5, a 17-year-old boy was arrested in Walsall, West Midlands, in connection with a cyberattack on Transport for London (TfL). The attack began 4 days earlier and resulted in the bank data of about 5,000 customers being compromised. The data concerned include names, e-mail addresses and residential addresses.

Impact and measures

Paul Foster, head of NCA’s National Cyber Crime Unit, stressed the potentially serious consequences of such attacks on public infrastructure. The NCA works closely with TfL and the National Cyber Security Centre (NCSC) to minimize risks for customers.

TfL’s Chief Technology Officer Shashi Verma stated that the affected customers would be contacted directly. He added that the security of the systems and customer data is of paramount importance to TfL and that it is continuously monitored who accesses the systems.

Customer information

TfL has announced that some customer data, including names, email addresses and residential addresses, has been compromised. Data from Oyster card refunds could also be affected, including bank account numbers and sort codes.

As a precaution, TfL will contact the affected customers directly to inform them about the support options and the next steps. Customers are encouraged to be alert to suspicious emails, calls or text messages.

Conclusion

The investigation into the cyberattack is ongoing and TfL continues to work closely with authorities to ensure the security of customer data. Customers are regularly informed about the state of affairs and asked for patience while investigations continue.

Sources

  • London transport cyber attack: Boy, 17, arrested, BBC.