The effects of the cyber attack on Transport For London (TFL) systems earlier in September are still ongoing, with employees now being asked to attend an in person meeting to verify their identities and reset their passwords. The organisation has confirmed that customer data was accessed during the attack, and one person has been arrested in relation to the incident.
The leaked data is said to possibly include the bank numbers and sort codes for around 5,000 customers, and applications for new Oyster photo and zip cards have been temporarily suspended.
Public transport itself remained largely unaffected in the incident, which primarily disrupted internal systems and the refund process for the transport agency, but the impact is still causing delay for some of TFL’s systems.
Ongoing disruption
TFL have confirmed it will be in touch with any customer whose information was compromised, and the organisation is monitoring anyone who uses their system to ensure only those with authorisation can gain access,
“Some customers may ask questions about the security of our network and their data. First and foremost, we must reassure that our network is safe,” TFL added on its employee hub. “Secondly, we’re contacting customers directly about steps being taken regarding their data.”
This attack reinforces the current trend of critical infrastructure as the target for cyber criminals. Organisations such as hospitals and energy companies which provide a public service are particularly vulnerable since they don’t tend to have the budget for top of the range cyber security.
Via BleepingComputer
More from TechRadar Pro
https://cdn.mos.cms.futurecdn.net/fyEfMA2aGbQsEjuVkfdPhP-1200-80.jpg
Source link
