Skip to content

TfL Hit by Cyber Attack: Live Travel Info Disrupted, Bank Data Accessed

Real-time travel updates vanished as TfL battles a serious cyber attack. Bank details of thousands of Oyster card users may have been accessed, raising alarm bells for commuters.

In this picture we can see a close view of the identity card. In the front we can see american flag...
In this picture we can see a close view of the identity card. In the front we can see american flag and "Critical Licence" written.

TfL Hit by Cyber Attack: Live Travel Info Disrupted, Bank Data Accessed

Transport for London (TfL) has suffered a cyber attack that temporarily disrupted live travel information and accessed some Oyster card users' bank details. The incident, discovered on Sunday 1 September, has led to service disruptions and data security concerns.

The attack affected live Tube arrival information on some digital channels, leaving commuters without real-time updates. Around 5,000 Oyster card users may have had their refund data accessed, including sensitive bank account numbers and sort codes. TfL staff have limited access to data systems, causing delays in responding to online enquiries. As a precaution, applications for new Oyster photocards, including Zip cards, have been temporarily suspended. Contactless payment card users also cannot access their online journey history due to the attack.

TfL has launched a thorough investigation into the incident, working alongside the National Crime Agency and the National Cyber Security Centre. The attack was identified and contained promptly, with TfL taking immediate action to limit access. The incident is also connected to a cyberattack on London’s Heathrow Airport, with UK authorities and international partners, including the EU Cybersecurity Agency ENISA and local airport authorities in affected cities, involved in the investigation.

TfL is committed to keeping the public updated as the investigation progresses and services are restored. Affected Oyster card users will be contacted directly, and TfL urges anyone with concerns about their data to visit their website for more information. The safety and security of customer data remain a top priority for TfL.

Read also:

Latest