Teenager arrested over Transport for London cyber attack
The boy, who was arrested on September 5, was questioned by National Crime Agency officers and bailed.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.A 17-year-old boy has been arrested in Walsall as part of the investigation into a cyber security incident affecting Transport for London (TfL), the National Crime Agency (NCA) said.
The teenager was detained on suspicion of Computer Misuse Act offences in relation to the attack, which was launched on TfL on September 1.
The boy, who was arrested on September 5, was questioned by NCA officers and bailed.
It comes as TfL said some customer data was accessed in the cyber attack.
TfL has been investigating the incident, which was identified on September 1, alongside the NCA and said some customer names and contact details had been compromised.
Some Oyster card refund data may also have been accessed in the cyber attack which could include bank account details.
Shashi Verma, TfL’s chief technology officer, said: “The security of our systems and customer data is very important to us.
“We continually monitor who is accessing our systems to ensure only those authorised can gain access.
“We identified some suspicious activity on Sunday September 1 and took action to limit access.
“A thorough investigation continues alongside the National Crime Agency and the National Cyber Security Centre.
“Although there has been very little impact on our customers so far, the situation continues to evolve and our investigations have identified that certain customer data has been accessed.
Throughout this planned process we have ensured that all safety critical systems and processes have been maintained
“This includes some customer names and contact details (including email addresses and home addresses where provided).
“Some Oyster card refund data may also have been accessed.
“This could include bank account numbers and sort codes for a limited number of customers.
“As a precautionary measure, we will be contacting these customers directly as soon as possible to advise them of the support we can provide and the steps they can take.
“We have notified the Information Commissioner’s Office and are working at pace with our partners to progress the investigation.
“We will provide further updates as soon as possible.
“In addition, as part of the measures we have implemented to deal with the cyber incident, we have today put in place additional measures to improve our security.
The security measures we are taking mean that it is now not possible for us to deliver the necessary system changes to enable 47 additional stations outside London to benefit from pay as you go with contactless on September 22 as planned
“This includes an all-staff IT identity check.
“Throughout this planned process we have ensured that all safety critical systems and processes have been maintained.
“We do not expect any significant impact to customer journeys as we carry out this process.
“However, temporary and limited disruption is possible to some services so, as ever, please check before you travel.
“The security measures we are taking mean that it is now not possible for us to deliver the necessary system changes to enable 47 additional stations outside London to benefit from pay as you go with contactless on September 22 as planned.
“We are working with DfT and the Rail Delivery Group to reschedule and we apologise for the delay.
“We will continue to keep our customers and our staff updated.
Attacks on public infrastructure such as this can be hugely disruptive and lead to severe consequences for local communities and national systems
“I would like to apologise for the inconvenience this incident may cause customers and I thank everyone for their patience as we respond to this incident.”
NCA deputy director Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “We have been working at pace to support Transport for London following a cyber attack on their network, and to identify the criminal actors responsible.
“Attacks on public infrastructure such as this can be hugely disruptive and lead to severe consequences for local communities and national systems.
“The swift response by TfL following the incident has enabled us to act quickly, and we are grateful for their continued co-operation with our investigation, which remains ongoing.
“The NCA leads the UK’s response to cyber crime.
“We work closely with partners to protect the public by ensuring cyber criminals cannot act with impunity, whether that be by bringing them before the courts or through other disruptive and preventative action.”