TfL restores fares services three months after a devastating cyber attack

Three months after a cyber attack disrupted Transport for London’s online services, commuters can finally access their contactless journey history and claim refunds for delays online.

 

In September, the transportation agency said that it was “dealing with an ongoing cyber security incident” but assured riders that none of its essential operations were compromised or disrupted.

 

TfL said it worked with relevant law enforcement authorities, including the National Crime Agency and the National Cyber Security Centre, to respond to the incident but assured passengers by stating that “there is no evidence that any customer data has been compromised.”

 

Following an investigation into the cyber incident, TfL confirmed that certain sensitive personal data of its customers were accessed during the security incident. The compromised data included “names and contact details, including email addresses and home addresses where provided.”

 

In a recent update, TfL said that its online systems that were taken offline following the cyber security incident have started working again. The agency said it has dispatched more than 85,000 photocards following the restoration.

 

“Customers using pay as you go with a contactless card or a mobile device can now see their full journey history online, after it was temporarily restricted following a recent highly sophisticated cyber security incident,” reads the incident update.

 

The restoration follows TfL reopening systems for Zip photocards, 60+ London Oyster photocards, 18+ Student Oyster photocards and other concessions in recent weeks.

 

TfL added that the recent update marks the end of operational disruption and that “all TfL fares services impacted by the recent cyber incident are now reinstated.”

 

Commenting on the restoration, Shashi Verma, Chief Technology Officer at TfL, said, “We’re pleased that customers can now access their contactless journey history again, meaning that all TfL fares services impacted by the recent cyber incident are now reinstated.”