TfL restricts some customer data access amid ongoing cyber attack
Transport for London (TfL) has temporarily restricted some customer data access as it continues to deal with the ongoing cyber attack.
TfL said there was no evidence that customer data had been compromised and no impact on services
Alongside measures to limit employee access to systems and email, TfL has now temporarily restricted access to journey history for pay-as-you-go contactless customers, as well as limited access to some live travel data via apps, TfL Go and the TfL website, including next train information and the TfL JamCams.
It’s also temporarily restricted access to the photocard portal, which allows customers to apply for travel concessions, including the Zip Photocard, 16+ and 18+ Photocard and the 60+ Oyster photocard.
Earlier this week, the booking system for Dial a Ride was also temporarily unavailable but essential bookings can now be made via phone and TfL plans a return to a full call centre service in the coming days.
The local government body, responsible for most of the transport network in London, apologised for any inconvenience to customers and said it’s working to bring services back online as quickly as possible.
TfL also reiterated that there remains no impact to its public transport services and no evidence that any customer data has been compromised.
The breach was identified on Sunday and TfL is working closely with the National Crime Agency (NCA) and the National Cyber Security Centre.
The organisation’s corporate headquarters at Palestra House, Southwark, is believed to be the main location affected.
Shashi Verma, TfL’s chief technology officer, said: “We will continue to keep our customers and our staff updated on the incident as part of this ongoing work and thank them for their patience as we respond to this incident.”
A spokesperson for the NCA said: “We are aware of a cyber security incident involving Transport for London, and are working closely with the National Cyber Security Centre and with TfL itself to respond to it.
“The investigation is ongoing, and we are unable to comment further.”
Latest TfL updates on the cyber security attack can be found here.
Natalie Middleton
Natalie has worked as a fleet journalist for over 20 years, previously as assistant editor on the former Company Car magazine before joining Fleet World in 2006. Prior to this, she worked on a range of B2B titles, including Insurance Age and Insurance Day.
