TfL hack in 2024 affected around 10 million people, BBC can reveal
TfL insists it has "kept customers informed throughout this incident and will continue to take all necessary action".
Coverage by Political Leaning
See how different sides of the spectrum reported this story
Notable Quotes
"At the time of the incident, we identified around 5,000 customers requiring support as we knew that some of their Oyster card refund data may also have been accessed, which could include bank account numbers and sort codes."
— TfL spokesperson , Other
"We have kept our customers informed throughout this incident and will continue to take all necessary action."
— TfL spokesperson , Other
"The most surprising part of the TfL breach isn’t that millions of people had their data stolen, it’s that the true scale of it only really becomes clear long after the incident occurs."
— Jake Moore , Other
Key People
Tags
All Coverage
TfL insists it has "kept customers informed throughout this incident and will continue to take all necessary action".
Transport for London (TfL) has confirmed that a 2024 breach exposed the data of more than 7 million people, a far larger crowd than the few thousand customers originally warned that their details might be at risk.
Transport for London (TfL) has confirmed around 10 million people had their data stolen in a 2024 cyberattack, new reports have claimed.
Around 10 million people had their data stolen in a cyberattack on London's public transport operator in 2024, making it one of Britain's largest breaches, the BBC reported on Friday.
Similar Stories
Related coverage based on topic and tags
Russian glide bomb attack on Zaporizhzhia kills at least 15 people
Children are among the victims, authorities say, and more victims could still be buried in the rubble of a large apartment block that was destroyed.
October 10, 2026 at 11:17 AMRogue Anthropic AI agent gave police fake tip in unsolved murder case
Philadelphia police said the tip was "flagged as spam", but criticised the tech company for taking more than two months to detect and report the breach.
October 10, 2026 at 10:06 AMNord Stream trial: How German police followed the evidence - to Ukraine
After four years, a Ukrainian man is set to stand trial in Hamburg accused of sabotaging the Nord Stream pipelines.
October 10, 2026 at 04:51 AMKalshi probes suspicious trades tied to Trump press secretary pick, WSJ reports - Reuters
Kalshi probes suspicious trades tied to Trump press secretary pick, WSJ reports Reuters
October 9, 2026 at 10:33 PMUAE says Omani flydubai co-pilot planned suicide attack on Tel Aviv flight - Reuters
UAE says Omani flydubai co-pilot planned suicide attack on Tel Aviv flight Reuters
October 9, 2026 at 05:59 PMRussian search engine Yandex struggles after Ukrainian strikes on data centres
Often dubbed "Russia's Google", the tech firm admits customers may experience disruption to digital services due to the attacks.
October 9, 2026 at 05:14 PM