Transport for London (TfL), London's local government transport agency, is investigating a cyberattack.
TfL is organised into three units that oversee systems . It serves over 8.4 million citizens.
The agency says its services have not yet been affected by the cyberattack and there is no evidence that customer information has been compromised.
See also: Atlassian Confluence vulnerability used for crypto-mining attacks
" We are currently dealing with an ongoing cyber security incident ," TfL's Customer Information Team said in an email sent to customers.
Transport for London has informed the relevant government agencies (including the National Crime Agency and the National Cyber Security Centre )about the attack and is working with them to learn more about the incident and limit its impact.
"The security of our systems and data is very important to us and we have taken immediate steps to prevent any further access to our systems," the service added.
See also: Russian hackers suspected of cyberattack on Deutsche Flugsicherung
Additionally, Transport for London's chief technology officer, Shashi Verma, explained that the agency has taken various measures to protect internal systems and address the cyberattack.
Previous attack
In May 2023, the Cl0p compromised a MOVEit managed file transfer (MFT) server from a TfL supplier (hosted outside of TfL’s systems). The Russian hackers stole the contact details of around 13,000 customers.
See also: Lockbit gang claims ransomware attack on TDSB
The ongoing cyberattack on Transport for London is a worrying incident, but the organisation is taking proactive steps to resolve it. In the meantime, it serves as an important reminder for both organisations and individuals to prioritise cybersecurity and take the necessary precautions to protect sensitive information. Passengers are advised to be aware of any disruptions and be vigilant for potential phishing attempts during this period (in the case of data theft, phishing attacks are very common).
Those interested can monitor the TfL website for updates on the ongoing investigation and any changes to transport services.
Source: www.bleepingcomputer.com
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
