2024 Cyberattack on Transport for London Exposes Data of Around 10 Million People

In 2024, a cyberattack on Transport for London (TfL) compromised the personal data of around 10 million people, marking one of the UK's largest breaches. The attack, linked to the criminal group Scattered Spider, occurred between August 29 and September 6 and disrupted TfL's online services for three months, costing tens of millions of pounds. TfL notified over seven million customers via email, though many affected individuals may not have been alerted. Two British teenagers have been charged and are due to stand trial in June.