Transport for London Cyber security incident(tfl.gov.uk)
tfl.gov.uk
Transport for London Cyber security incident
https://tfl.gov.uk/campaign/cyber-security-incident
9 comments
It's annoying that there's no date/timestamp on that page
Philosophically, when is TFL not dealing with a cybersecurity incident? It's a perennial page for a perennial situation, after all.
In fact, it seems more like a canary that they can take down when evidence of a breach turns up!
In fact, it seems more like a canary that they can take down when evidence of a breach turns up!
Like iscaliforniaonfire.com
I received an email from TFL about this 25 minutes ago
There used to be a Twitter account named something like @TLFTravel. It was a high-quality, surreal Weird Twitter satire. I miss those days.
I Have just received a follow up email,
Dear Mr aiiotnoodle [changed to my username],
We are currently dealing with an ongoing cyber security incident. The security of our systems and customer data is very important to us, and we have taken immediate action to protect our systems.
We identified some suspicious activity on Sunday 1 September and took action to limit access. We are conducting a thorough investigation into the incident, alongside the National Crime Agency and the National Cyber Security Centre.
Although there has been very little impact on our customers so far, the situation is evolving and our investigations have identified that certain customer data has been accessed. This includes some customer names and contact details, including email addresses and home addresses where provided.
Some Oyster card refund data may have also been accessed. This could include bank account numbers and sort codes for a limited number of customers (around 5,000).
If you are affected, we will contact you directly as soon as possible as a precautionary measure, and will offer you support and guidance.
We are doing all we can to protect our services and secure our systems and data. Our proactive measures mean that:
Live Tube arrival information is not available on some of our digital channels, including TfL Go and the TfL website. In-station and journey planning information is still available
Applications for new Oyster photocards, including Zip cards, have been temporarily suspended. If you want to replace a lost photocard, please call us on 0343 222 1234, 08:00-20:00 every day, and select option 1 (charges may apply)
If you have been unable to apply, please continue making your journeys as usual and keep a record of any fares paid. We may be able to arrange a refund once the incident has been resolved and you receive your new photocard
If you travel using a contactless payment card, you won’t be able to access your online journey history
Currently we are unable to issue refunds for incomplete pay as you go journeys made using contactless, so always remember to touch in and out. Oyster customers can self-serve online.
Many of our staff have limited access to systems and as a result there will be some delays responding to any online enquiries.
We’re also undertaking an all-staff IT identity check. Although we don’t expect any significant impact to customer journeys as we carry out this process, temporary and limited disruption is possible to some services. Please check before you travel.
We will continue to keep you updated. We are sorry for the inconvenience this incident may cause and thank you for your patience.
Yours sincerely
Customer Information Team
Transport for London
Edit: formatting
Dear Mr aiiotnoodle [changed to my username],
We are currently dealing with an ongoing cyber security incident. The security of our systems and customer data is very important to us, and we have taken immediate action to protect our systems.
We identified some suspicious activity on Sunday 1 September and took action to limit access. We are conducting a thorough investigation into the incident, alongside the National Crime Agency and the National Cyber Security Centre.
Although there has been very little impact on our customers so far, the situation is evolving and our investigations have identified that certain customer data has been accessed. This includes some customer names and contact details, including email addresses and home addresses where provided.
Some Oyster card refund data may have also been accessed. This could include bank account numbers and sort codes for a limited number of customers (around 5,000).
If you are affected, we will contact you directly as soon as possible as a precautionary measure, and will offer you support and guidance.
We are doing all we can to protect our services and secure our systems and data. Our proactive measures mean that:
Live Tube arrival information is not available on some of our digital channels, including TfL Go and the TfL website. In-station and journey planning information is still available
Applications for new Oyster photocards, including Zip cards, have been temporarily suspended. If you want to replace a lost photocard, please call us on 0343 222 1234, 08:00-20:00 every day, and select option 1 (charges may apply)
If you have been unable to apply, please continue making your journeys as usual and keep a record of any fares paid. We may be able to arrange a refund once the incident has been resolved and you receive your new photocard
If you travel using a contactless payment card, you won’t be able to access your online journey history
Currently we are unable to issue refunds for incomplete pay as you go journeys made using contactless, so always remember to touch in and out. Oyster customers can self-serve online.
Many of our staff have limited access to systems and as a result there will be some delays responding to any online enquiries.
We’re also undertaking an all-staff IT identity check. Although we don’t expect any significant impact to customer journeys as we carry out this process, temporary and limited disruption is possible to some services. Please check before you travel.
We will continue to keep you updated. We are sorry for the inconvenience this incident may cause and thank you for your patience.
Yours sincerely
Customer Information Team
Transport for London
Edit: formatting
I dismissed the first mail, but what stuck out to me in this one is the: "We’re also undertaking an all-staff IT identity check."
When did this start? It’s disconcertingly vague.
[deleted]