Transport for London (TfL) - responsible for much of the public network carrying people around England's capital - is battling to stay on top of an unfolding "cyber security incident".

Confirmation emerged yesterday evening when TfL [1]said : "We are currently dealing with an ongoing cyber security incident.

"The security of our systems and customer data is very important to us, and we have taken immediate action to prevent any further access to our systems."

[2]

TfL said it was "working closely with the relevant government agencies to respond" to the attack and would provide an update when it is resolved.

[3]

[4]

In a statement sent to The Register , TfL's Chief Technology Officer, Shashi Verma said: "We have introduced a number of measures to our internal systems to deal with an ongoing cyber security incident."

[5]Brain Cipher claims attack on Olympic venue, promises 300 GB data leak

[6]Dick's Sporting Goods discloses cyberattack

[7]Seattle airport 'possible cyberattack' snarls travel yet again

[8]Halliburton probes 'an issue' disrupting business ops

"Although we'll need to complete our full assessment, at present, there is currently no evidence that any customer data has been compromised. There is currently no impact to TfL services and we are working closely with the National Crime Agency and the National Cyber Security Centre to respond to the incident."

A spokesperson the NCSC told us: "We are working with Transport for London, alongside law enforcement partners, to fully understand the impact of an incident."

According to [9]reports , backroom systems at the organization's corporate headquarters have been affected, and staff were asked to work from home if possible.

TfL Contactless

Coincidentally, the sign-in page for Oyster and Contactless, used to make payments for journeys on the TfL network, has been pulled offline in the name of maintenance. ®

Get our [10]Tech Resources



[1] https://tfl.gov.uk/campaign/cyber-security-incident?cid=email_FINAL_TFLU369_Security_update-CTA_text_website

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZtbeRSNOTMolAxtMZcj49AAAAU0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZtbeRSNOTMolAxtMZcj49AAAAU0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZtbeRSNOTMolAxtMZcj49AAAAU0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2024/08/29/brain_cipher_olympic_attack/

[6] https://www.theregister.com/2024/08/28/dickssporting_goods_runs_into_problems/

[7] https://www.theregister.com/2024/08/26/seattle_airport_cyberattack/

[8] https://www.theregister.com/2024/08/22/halliburton_investigates_incident_amid_cyberattack/

[9] https://www.bbc.co.uk/news/articles/cd9dpek1883o

[10] https://whitepapers.theregister.com/