TfL cyber security incident, September 2024.

[whole diary]

[JayMac]

I've just received an email from TfL^» (Transport for London - about) about a cyber security incident they are currently dealing with.

Cyber security incident

We are currently dealing with an ongoing cyber security incident. At present, there is no evidence that any customer data has been compromised and there has been no impact on TfL services.
The security of our systems and customer data is very important to us, and we have taken immediate action to prevent any further access to our systems.

We are working closely with the relevant government agencies to respond to the incident.

We will update you further when the incident has been resolved.

https://tfl.gov.uk/campaign/cyber-security-incident?cid=email_FINAL_TFLU369_Security_update-CTA_text_website

[Ralph Ayres]

The apparent lack of any impact (TfL^» (Transport for London - about) website running, TfL able to email out to their mailing list, no impact on services and no evidence of customer data being compromised) left me a little baffled. I have now though spotted that I can't log in to my Oyster^▸ (Smartcard system used by passengers on Transport for London services) account, instead being told "We're doing maintenance for contactless" which it presumably defaults to in the event of any problem.
TfL office staff have I gather been asked to work from home if possible, though as a former employee the remote access was ropey at the best of times so good luck with that!

[Surrey 455]

I got that email yesterday too and another today that starts "Following our email to you yesterday (2 September) about the proposed changes to bus routes 45, 59 and 118 ......."

Well I didn't receive that email. Could it be the cyber attack? 

[Mark A]

Article: TfL^» (Transport for London - about) still wrestling with the impact of this.

Mark

https://www.theguardian.com/uk-news/2024/sep/23/fallout-from-tfl-cyber-attack-is-slow-burning-and-potentially-costly

[Fourbee]

I will using contactless in London next week. These sections concern me from the update at https://tfl.gov.uk/campaign/cyber-security-incident

Oyster^▸ (Smartcard system used by passengers on Transport for London services) and contactless customers - online journey history is currently unavailable through any of our platforms

We're currently unable to issue refunds for incomplete pay as you go journeys made using contactless, so always remember to touch in and out. Oyster customers can self-serve online

...so I have no way to verify what they charge me is correct and if it is incorrect then I wont be refunded?

[Electric train]

I will using contactless in London next week. These sections concern me from the update at https://tfl.gov.uk/campaign/cyber-security-incident

Oyster^▸ (Smartcard system used by passengers on Transport for London services) and contactless customers - online journey history is currently unavailable through any of our platforms

We're currently unable to issue refunds for incomplete pay as you go journeys made using contactless, so always remember to touch in and out. Oyster customers can self-serve online

...so I have no way to verify what they charge me is correct and if it is incorrect then I wont be refunded?

You can check you contactless payment card via you banks app to see what you have paid.

TfL^» (Transport for London - about) do say "currently unable to" and not "will never be able to" make refunds