TfL requires in-person password resets for all staff following cyberattack

Digital hand set location on map with two pins. AI technology in GPs, innovation delivery, map location, future transport logistic, route path concept. GPs point. New office location, change address
(Image credit: Shutterstock / CoreDESIGN)

The effects of the recent cyberattack on Transport For London (TfL) systems continue to be felt, with employees now being asked to attend an in person meeting to verify their identities and reset their passwords.

The organization has confirmed customer data was accessed during the attack, and one person has been arrested in relation to the incident, with the leaked data possibly including the bank details for around 5,000 customers, with applications for new Oyster photo and zip cards temporarily suspended.

Public transport itself remained largely unaffected in the incident, which primarily disrupted internal systems and the refund process for the transport agency, but the impact is still causing delay for some of TfL’s systems.

Ongoing disruption

TfL has confirmed it will be in touch with any customer whose information was compromised, and the organization is monitoring anyone who uses their system to ensure only those with authorisation can gain access,

"Some customers may ask questions about the security of our network and their data. First and foremost, we must reassure that our network is safe," TfL added on its employee hub. "Secondly, we're contacting customers directly about steps being taken regarding their data."

This attack reinforces the current trend of critical infrastructure as the target for cyber criminals. Organisations such as hospitals and energy companies which provide a public service are particularly vulnerable since they don’t tend to have the budget for top of the range cyber security.

Via BleepingComputer

More from TechRadar Pro

Ellen Jennings-Trace
Staff Writer

Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.

Read more
The British Museum main entrance
British Museum forced to partly close following cyberattack by ex-worker
Password
Millions of airline customers possibly affected by OAuth security flaw
An illustration of a silhouetted thief in motion running while carrying a stolen fingerprint
The 5 worst cyberattacks of 2024
Data leak
US utility giant says MOVEit hack exposed stolen data
Representational image of data security
Travel data of almost 500,000 users exposed in Daytrip leak
Russian flag on a laptop
Major Russian IT service provider hit with cyberattack
Latest in Pro
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
A young man working on laptop in office writing notes
Ending the fix/break cycle of End User Computing support
OpenAI
OpenAI wants to help your business build its next generation of AI agents
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
Nation-state threats are targeting UK AI research
A hand reaching out to touch a futuristic rendering of an AI processor.
Business investors are positive about AI’s impact on the economy
Scam alert
Fake jobs and phone calls: How Americans lost $12.5 bn to fraud in 2024
Latest in News
Vision Pro Metallica
Apple Vision Pro goes off to never never land with Metallica concert footage
Mufasa is joined by another lion, a monkey and a bird in this promotional image
Mufasa: The Lion King prowls onto Disney+ as it finally gets a streaming release date
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
An Nvidia GeForce RTX 4060 on a table with its retail packaging
Nvidia RTX 5060 GPU spotted in Acer gaming PC, suggesting rumors of imminent launch are correct – and that it’ll run with only 8GB of video RAM
Indiana Jones talking to a friend in a university setting with a jaunty smile on his face
New leak claims Indiana Jones and the Great Circle PS5 release will come in April
A close up of the limited edition vinyl turntable wrist watch from AndoAndoAndo
This limited-edition timepiece turns the iconic Technics SL-1200 turntable into a watch, and I want one