TfL hack in 2024 affected around 10 million people, BBC can reveal
TfL insists it has "kept customers informed throughout this incident and will continue to take all necessary action".
Coverage by Political Leaning
See how different sides of the spectrum reported this story
Notable Quotes
"At the time of the incident, we identified around 5,000 customers requiring support as we knew that some of their Oyster card refund data may also have been accessed, which could include bank account numbers and sort codes."
— TfL spokesperson , Other
"We have kept our customers informed throughout this incident and will continue to take all necessary action."
— TfL spokesperson , Other
"The most surprising part of the TfL breach isn’t that millions of people had their data stolen, it’s that the true scale of it only really becomes clear long after the incident occurs."
— Jake Moore , Other
Key People
Tags
All Coverage
TfL insists it has "kept customers informed throughout this incident and will continue to take all necessary action".
Transport for London (TfL) has confirmed that a 2024 breach exposed the data of more than 7 million people, a far larger crowd than the few thousand customers originally warned that their details might be at risk.
Transport for London (TfL) has confirmed around 10 million people had their data stolen in a 2024 cyberattack, new reports have claimed.
Around 10 million people had their data stolen in a cyberattack on London's public transport operator in 2024, making it one of Britain's largest breaches, the BBC reported on Friday.
Similar Stories
Related coverage based on topic and tags
Disabled people in England to get 24-hour free bus travel
The change, which has been welcomed by campaign groups, will come into effect in England from April.
August 18, 2026 at 12:32 AMSensitive medical data sent over unencrypted pager network
NHS Blood and Transplant apologises after sensitive data sent over unencrypted pager network.
August 14, 2026 at 07:53 AMVirgin takes step towards running Channel Tunnel rail services
Firm wants to run up to 20 daily journeys to Europe but it must get additional approval for overseas tracks.
August 17, 2026 at 12:46 PMFlock boss admits surveillance firm took too long to act over police abuse
US police officers have quit after using licence plate-reading cameras to track romantic partners.
August 13, 2026 at 01:02 PMMonzo says issue with card payments and transfers now resolved
The digital bank said all of its services were now "back up and running"
August 19, 2026 at 04:04 PM81,000 warning letters sent to crypto holders in HMRC tax crackdown
According to a Freedom of Information (FOI) request the number of letters sent has almost tripled since 2024.
August 19, 2026 at 04:14 PM