The data of millions of commuters was stolen, Londoners were left out of pocket and 27,000 Transport for London staff were forced to reset their passwords.
Over four days in 2024 a pair of teenage hackers had London’s transport network at their mercy. The hackers had burrowed into the heart of Transport for London’s IT systems and held the “keys to the kingdom”.
While the main tube and bus networks were not directly affected, the dial-a-ride service for disabled passengers was unable to process bookings for a period. The head of TfL, Andy Lord – a veteran of British Airways – said the attack was the worst incident he had faced in his career.
Read more…
Source: The Guardian
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- National Lottery: 10 million players told to change passwords as attackers hit online accounts
March 19, 2018
Millions of National Lottery players have been urged to change their passwords following what parent company Camelot describes as “suspicious activity” involving lottery accounts. Camelot, which runs the National Lottery, insists there’s been no access to core systems or databases that would affect lottery draws or prizes, but has recommended that its 10.5 million registered users ...
- Cybersecurity and Brexit: What does it mean for the fight against hackers?
March 8, 2018
Brexit means Brexit, according to the prime minister, but with little more than a year until 29 March 2019 — the date the UK is due to depart the European Union — there are still many questions to be answered for cybersecurity professionals. One thing that is certain is that the upcoming General Data Protection Regulation (GDPR) ...
- Government set to position UK as leader in cyber amid rise in attacks
March 8, 2018
The government wants to position the UK as a global leader in cybersecurity and make it one of the safest countries to do business. These aims were set out in its Cyber Security Export Strategy; a five year plan for the Government to protect businesses and people, deter attackers and develop security skills. The report reads: “Our ...
- UK Government To Seek Post-Brexit EU Data Protection Agreement
March 5, 2018
Tech firms said they welcome the government’s latest data protection plans, which could see an ongoing EU-level role for Britain’s information commissioner UK technology ndmpanies have welcomed a commitment by the government to seek a broader role for Britain in the ongoing development of European data protection policy after exit from the European Union, as laid out in ...
- UK local gov: 37 cyber attacks a minute but little mandatory training
February 20, 2018
Britain’s local governments were hit by almost 100 million cyber attacks in the last five years, while one in four councils’ systems were successfully breached, according to research. Privacy campaign group Big Brother Watch sent Freedom of Information to all the UK’s local authorities, asking for details of cyber attacks and data breaches from 2013-17. Read more… Source: ...
- UK names Russia as source of NotPetya, USA follows suit
February 15, 2018
The United Kingdon’s Foreign and Commonwealth Office has formally “attributed the NotPetya cyber-attack to the Russian Government”, specifically the nation’s military. “The decision to publicly attribute this incident underlines the fact that the UK and its allies will not tolerate malicious cyber activity,” said a February-15th-dated statement from Foreign Office Minister for Cyber Security Lord (Tariq) Ahmad of ...

