Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Transport for London (TfL) customer data exposed after Transport for London (TfL) breach

Data Leak
First reported
Last updated
Happening score
H score 46
1 unique sources, 1 articles

Summary

Hide ▲

The Transport for London (TfL) intrusion became a confirmed data leak after customer data was stolen from the Oyster refunds system, raising misuse risk for affected records. TfL disclosed the theft on September 12, 2024, after the attack had already disrupted refund services. The stolen-data thread sits alongside the wider operational damage and criminal case tied to the breach.

Related Happenings

Thalha Jubair and Owen Flowers Scattered Spider arrests and charges

Law Enforcement
H score36 First: 19.09.2025 10:05 Last: 19.09.2025 10:05 Sources 1

How related: Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024.

About this happening: **Scattered Spider** members **Thalha Jubair** and **Owen Flowers** pleaded guilty in the **United Kingdom** over the **August 2024** cyberattack that **crippled Transport for Lon...

Open Happening

Transport for London (TfL) hit by cyberattack

Incident
H score49 First: 19.09.2025 10:05 Last: 19.09.2025 10:05 Sources 1

How related: On September 2, 2024, TfL's infrastructure suffered a cybersecurity incident, causing operational disruptions that continued for days.

About this happening: The **August 2024 cyber attack** on **Transport for London (TfL)** caused **significant disruption** and **£29m ($38m)** in loss and recovery costs. The intrusion affected the **c...

Open Happening

Timeline

  1. 23.06.2026 18:31 1 articles · 2h ago

    TfL cybersecurity incident disrupts Oyster refund services

    Victim Impact Update

    Transport for London's infrastructure suffered a cybersecurity incident that disrupted customer refund services, including the Oyster refunds system, and delayed refunds for some users; operational disruption continued for days.

    Show sources
    Open in new tab
  2. 12.09.2024 03:00 2 articles · 21mo ago

    TfL admits customer data was stolen from the intrusion

    Initial Disclosure

    Transport for London admitted that customer data had been stolen in the attack, and the U.K.'s National Crime Agency said Owen Flowers was arrested the same day.

    Show sources
    Open in new tab