17-Year-Old Arrested Over Cyber Attack on Transport for London

A 17-year-old boy has been arrested in connection with a recent cyber security breach affecting Transport for London (TfL), the UK's National Crime Agency (NCA) announced. The teenager, who was apprehended in Walsall on September 5, is suspected of involvement in a cyber attack that exposed sensitive customer data, including bank account details.
TfL revealed that approximately 5,000 customers’ sort codes, bank account numbers, names, emails, and home addresses may have been compromised during the breach, which was first reported on September 2. The cyber security incident involved unauthorised access to customer information, including Oyster card refund data, potentially exposing customers to financial risks.
While the NCA and the National Cyber Security Centre (NCSC) have been working with TfL to assess and mitigate the risks, TfL has assured the public that the impact on customers has been minimal thus far. However, they warned that the situation is evolving, and an investigation into the full scope of the breach is ongoing.
Arrest and Investigation
The 17-year-old was arrested on suspicion of Computer Misuse Act offences and has since been bailed. The NCA is continuing its investigation, in collaboration with TfL and the NCSC, to identify those responsible for the cyber attack. Paul Foster, head of the NCA's National Cyber Crime Unit, described the attack as "hugely disruptive," noting that breaches targeting public infrastructure can have severe consequences for local communities and national systems.
TfL's chief technology officer, Shashi Verma, expressed regret over the incident and emphasised that affected customers would be contacted directly. He reassured the public that TfL remains committed to safeguarding customer data and is working closely with authorities to secure its systems.
As a precaution, TfL is advising customers who may have been affected to remain vigilant for suspicious emails, phone calls, or text messages. The NCSC is also recommending that customers stay alert to potential phishing attempts or fraudulent activities.
TfL continues to monitor its systems and is taking steps to prevent further unauthorised access. Customers will be kept updated as the situation unfolds, with an apology from TfL for any inconvenience caused.
Read More

Latest