Transport for London (TfL) says that each one employees (roughly 30,000 staff) should attend in-person appointments to confirm their identities and reset passwords following a cybersecurity incident disclosed nearly two weeks in the past.
“Resetting 30,000 colleague passwords in particular person will take a while and we might be prioritising the allocation of appointments centrally,” TfL mentioned on the TfL worker hub.
“This implies everybody might be required to attend an appointment at a specified TfL location to reset their password and be verified in-person for entry to TfL purposes and information,” it added.
The London public transportation company first knowledgeable the general public on September 2 in regards to the cybersecurity breach, assuring clients that there was no proof of compromised information.
Though the assault didn’t have an effect on London’s transportation companies, it disrupted inside techniques, on-line companies, and the company’s means to course of refunds. As of final Friday, TfL employees continued to face outages and system disruptions, impacting their means to answer buyer requests and concern refunds for contactless journeys.
This week, an replace on TfL’s incident standing web page revealed that buyer information, together with names, contact particulars, and addresses, had been compromised throughout the assault.
“Some clients could ask questions in regards to the safety of our community and their information. At the start, we should reassure that our community is secure,” the transport company added on the TfL worker hub. “Secondly, we’re contacting clients instantly about steps being taken relating to their information.”
TfL additionally confirmed that attackers accessed worker and buyer listing information, together with e-mail addresses, job titles, and worker numbers. Nonetheless, it mentioned there was no proof that different delicate information, corresponding to banking particulars, dates of beginning, or house addresses, had been compromised.
Suspect arrested by UK’s Nationwide Crime Company
On Thursday, the UK’s Nationwide Crime Company arrested a 17-year-old Walsall teenager suspected of being related to the cyberattack on town’s public transportation company. {The teenager} was later launched on bail after being questioned by NCA officers.
The NCA additionally arrested a 17-year-old male from Walsall in July for a potential hyperlink to the MGM Resorts ransomware assault. This assault was attributed to the Scattered Spider hacking collective, which acted as an affiliate of the BlackCat ransomware gang.
BleepingComputer requested the NCA if the identical particular person was arrested once more in September however has not but acquired a response.
TfL serves greater than 8.4 million Londoners by its floor, underground, and Crossrail (collectively managed with the UK’s Transport Division) transport techniques.
In Could 2023, the company skilled one other information breach when the Clop ransomware gang stole information belonging to roughly 13,000 clients from one among its suppliers’ MOVEit managed file switch (MFT) servers.