A 17-year-old boy has been arrested in connection with a cyber security incident affecting Transport for London (TfL), where about 5,000 customers’ bank account details may have been accessed by hackers. The National Crime Agency (NCA) reported that the teenager was arrested in Walsall, West Midlands, after the cyber attack began on 2 September.
TfL stated that data including names, emails, and home addresses had been accessed, with a “limited number of customers” potentially having their bank account numbers and sort codes compromised. The NCA confirmed that the teenager was arrested on suspicion of Computer Misuse Act offences and has since been bailed.
Paul Foster, head of the NCA’s National Cyber Crime Unit, emphasized the disruptive nature of attacks on public infrastructure and the severe consequences they can have for communities and national systems. The NCA is working with TfL and the National Cyber Security Centre (NCSC) to minimize the risk to customers.
TfL’s chief technology officer, Shashi Verma, assured that affected customers would be contacted directly and that investigations into the cyber attack were ongoing. He also mentioned that some Oyster card refund data may have been accessed, including bank account numbers and sort codes for a limited number of customers.
As a precautionary measure, TfL will be reaching out to these customers to provide support and advise on necessary steps. The NCSC is urging anyone who suspects they may have been affected by the data breach to remain vigilant against suspicious emails, phone calls, or text messages.
