iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
London commuters are being contacted by the city’s transport agency after the Transport for London (TfL) cyber attack earlier this month exposed the data of thousands, just as a teenager believed to be behind the incident was arrested.
According to the National Crime Agency (NCA), a 17-year-old man was arrested in Walsall, England, in relation to the incident.
The teenager was suspected to have breached the Computer Misuse Act but has since been questioned by the NCA.
Despite the arrest, sources speaking with media said the incident is still ongoing and that threat actors are still at large.
The threat actor behind the attack is believed to have exfiltrated passenger data from a number of sources.
About 5,000 passengers have potentially had their bank account data exposed through refund data and Oyster card use, including sort codes and account numbers.
Additionally, a number of commuters who had subscribed to TfL’s email alerts have had their name, email accounts, and/or home addresses exposed.
TfL advised that customers who had been affected by the incident would be contacted directly. It also said that it was improving its security measures.
Additionally, the NCA said it was working to support TfL in its response to the cyber attack.
“We have been working at pace to support Transport for London following a cyber attack on their network and to identify the criminal actors responsible,” said NCA national cyber crime unit deputy director Paul Foster.
“Attacks on public infrastructure such as this can be hugely disruptive and lead to severe consequences for local communities and national systems.
“The swift response by TfL following the incident has enabled us to act quickly, and we are grateful for their continued co-operation with our investigation, which remains ongoing.
“The NCA leads the UK’s response to cyber crime. We work closely with partners to protect the public by ensuring cyber criminals cannot act with impunity, whether that be by bringing them before the courts or through other disruptive and preventative action.”
Be the first to hear the latest developments in the cyber industry.
