Massive Cyberattack on Transport for London Exposes Data of 10 Million Customers In one of the largest data breaches in British history, Transport for London (TfL) confirmed that a cyberattack in late 2024 compromised the personal data of approximately 10 million customers. The breach, which occurred between August 29 and September 6, was discovered on September 1, prompting TfL to notify over 7 million customers via email in September those for whom email addresses were available in the exposed dataset. While the attack did not disrupt London’s transport networks, it caused three months of online service outages, resulting in financial losses estimated in the tens of millions of pounds. The stolen data included customer names and contact details, with a smaller subset around 5,000 individuals having bank account information potentially accessed. Investigators linked the attack to Scattered Spider, a notorious cybercriminal collective. Two British teenagers, previously charged in connection with the breach, are set to stand trial in June 2025. The incident reflects a broader surge in cyberattacks targeting UK organizations, with recent victims including Marks & Spencer, the Co-op, and Jaguar Land Rover.