TfL requires in-person password resets for all staff following cyberattack

Digital hand set location on map with two pins. AI technology in GPs, innovation delivery, map location, future transport logistic, route path concept. GPs point. New office location, change address
(Image credit: Shutterstock / CoreDESIGN)

The effects of the recent cyberattack on Transport For London (TfL) systems continue to be felt, with employees now being asked to attend an in person meeting to verify their identities and reset their passwords.

The organization has confirmed customer data was accessed during the attack, and one person has been arrested in relation to the incident, with the leaked data possibly including the bank details for around 5,000 customers, with applications for new Oyster photo and zip cards temporarily suspended.

Public transport itself remained largely unaffected in the incident, which primarily disrupted internal systems and the refund process for the transport agency, but the impact is still causing delay for some of TfL’s systems.

Ongoing disruption

TfL has confirmed it will be in touch with any customer whose information was compromised, and the organization is monitoring anyone who uses their system to ensure only those with authorisation can gain access,

"Some customers may ask questions about the security of our network and their data. First and foremost, we must reassure that our network is safe," TfL added on its employee hub. "Secondly, we're contacting customers directly about steps being taken regarding their data."

This attack reinforces the current trend of critical infrastructure as the target for cyber criminals. Organisations such as hospitals and energy companies which provide a public service are particularly vulnerable since they don’t tend to have the budget for top of the range cyber security.

Via BleepingComputer

More from TechRadar Pro

Ellen Jennings-Trace
Staff Writer

Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.