Breaking

Cyber attack TfL: What we know so far about ongoing TfL cyber security incident

Transport for London (TfL) says a “thorough investigation” is underway as the transport body faces an ongoing cyber attack.

It said there was no evidence customer data had been compromised and there was currently no impact on TfL services.

The organisation said it had identified some suspicious activity on Sunday (September 1) and had put measures in place to limit access.

TfL’s corporate headquarters at Palestra House, Southwark, is thought to be the main location affected.

TfL says a “thorough investigation” is underway as the transport body faces an ongoing cyber attack.placeholder image
TfL says a “thorough investigation” is underway as the transport body faces an ongoing cyber attack. | Getty Images

TfL’s chief technology officer Shashi Verma said: “Internal measures to limit access remain in place and there remains no impact to our public transport services and no evidence that any customer data has been compromised. 

“However, as part of the measures implemented to deal with the ongoing cyber security incident, we have temporarily restricted access to customer journey history for pay as you go contactless customers, as well as limited access to some live travel data via apps, TfL Go and the TfL website, including next train information and the TfL JamCams.

"In addition, we have made the decision to temporarily restrict access to the photocard portal, which allows customers to apply for travel concessions, including the Zip Photocard, 16+ and 18+ Photocard and the 60+ Oyster photocard. 

“We apologise for any inconvenience that these temporary changes will cause to some customers and are working to bring these back online as quickly as possible,” he added.

An investigation is currently taking place and TfL is working closely with the National Crime Agency (NCA) and the National Cyber Security Centre to respond to the incident.

A spokesperson for the NCA said: “We are aware of a cyber security incident involving Transport for London, and are working closely with the National Cyber Security Centre and with TfL itself to respond to it.

“The investigation is ongoing, and we are unable to comment further.”

In the summer a cyber attack led to more than 10,000 NHS appointments being cancelled.

Related topics:
Follow us
© 2026 Iconic Media Group Ltd. All rights reserved.Cookie SettingsTerms and ConditionsPrivacy notice