TfL Data Breach: Couple Jailed for £650k Tax Fraud After Stealing Employee Data
A husband and wife have been sentenced to three years and nine months in prison for orchestrating one of the most severe data breaches in Transport for London (TfL) history, resulting in a £433,000 loss to the UK’s public funds.
Luciana Akanbi, 38, an HR employee at TfL, exploited her access to sensitive employee records, stealing personal data including passport numbers, National Insurance details, and bank information from 107 colleagues. Between September 2021 and January 2022, she and her husband, Femi Akanbi, 51, used the stolen data to file 139 fraudulent tax rebate claims with HMRC, totaling nearly £650,000. Only £433,000 was successfully siphoned before authorities intervened.
The fraud, described by Woolwich Crown Court Judge David Miller as TfL’s "worst ever" data breach, forced the organization to overhaul its security systems. The breach also eroded staff morale, as affected employees faced credit checks, financial disruptions, and additional scrutiny from HMRC. Prosecutors revealed the scheme was highly sophisticated, involving 38 devices and a complex money-laundering operation to conceal the stolen funds.
Luciana Akanbi, who had worked at TfL since 2017, initially attempted to shift blame to her husband’s IT-specialist cousin during HMRC’s investigation. However, evidence confirmed her role as the primary source of the stolen data, while Femi Akanbi acted as the key facilitator, channeling the information into fraudulent claims. Financial strain, exacerbated by Femi’s gambling addiction with over £50,000 lost to betting accounts was cited as a motive.
Both Nigerian nationals, the Akanbis were ordered to serve identical sentences. Judge Miller noted their financial gains extended beyond the £82,000 traced to their accounts, though he acknowledged the stolen money was "gone" and no restitution would be ordered. Their potential deportation remains under consideration.
TfL’s Head of Counter-Fraud & Corruption, Richard Mullings, confirmed the organization has since implemented stricter controls on employee data access. The case was prosecuted in collaboration with HMRC, which emphasized its commitment to pursuing tax fraud. The breach underscores the far-reaching consequences of insider threats, from financial losses to long-term reputational damage for affected organizations.
Source: https://discover.swns.com/2026/06/couple-jailed-over-worst-ever-tfl-data-breach-and-650k-fraud/
HM Revenue & Customs cybersecurity rating report: https://www.rankiteo.com/company/hmrc
"id": "HMR1782752907",
"linkid": "hmrc",
"type": "Cyber Attack",
"date": "9/2021",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': '107 employees',
'industry': 'Transportation',
'location': 'London, UK',
'name': 'Transport for London (TfL)',
'type': 'Government Organization'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '107',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (Personally Identifiable '
'Information)',
'type_of_data_compromised': ['Passport numbers',
'National Insurance details',
'Bank information']},
'description': 'A husband and wife have been sentenced to three years and '
'nine months in prison for orchestrating one of the most '
'severe data breaches in Transport for London (TfL) history, '
'resulting in a £433,000 loss to the UK’s public funds. '
'Luciana Akanbi, an HR employee at TfL, exploited her access '
'to sensitive employee records, stealing personal data '
'including passport numbers, National Insurance details, and '
'bank information from 107 colleagues. The stolen data was '
'used to file 139 fraudulent tax rebate claims with HMRC, '
'totaling nearly £650,000.',
'impact': {'brand_reputation_impact': 'Long-term reputational damage',
'data_compromised': 'Passport numbers, National Insurance details, '
'bank information',
'financial_loss': '£433,000',
'identity_theft_risk': 'Affected employees faced credit checks and '
'financial disruptions',
'operational_impact': 'Forced TfL to overhaul security systems, '
'eroded staff morale',
'payment_information_risk': 'Bank information compromised'},
'investigation_status': 'Closed (conviction secured)',
'lessons_learned': 'Insider threats can lead to severe financial and '
'reputational damage; stricter access controls are '
'necessary for sensitive employee data.',
'motivation': 'Financial gain, exacerbated by gambling addiction',
'post_incident_analysis': {'corrective_actions': 'Security system overhaul, '
'stricter controls on '
'employee data access',
'root_causes': 'Unauthorized access to sensitive '
'data by an insider (HR employee), '
'lack of strict access controls'},
'recommendations': 'Implement stricter controls on employee data access, '
'enhance monitoring of HR systems, and conduct regular '
'security audits.',
'references': [{'source': 'Woolwich Crown Court'}, {'source': 'HMRC'}],
'regulatory_compliance': {'legal_actions': 'Criminal prosecution (3 years and '
'9 months imprisonment)'},
'response': {'containment_measures': 'Stricter controls on employee data '
'access implemented',
'law_enforcement_notified': 'HMRC and Woolwich Crown Court',
'remediation_measures': 'Security system overhaul'},
'threat_actor': 'Luciana Akanbi (HR employee) and Femi Akanbi (husband)',
'title': 'TfL Data Breach: Couple Jailed for £650k Tax Fraud After Stealing '
'Employee Data',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized access to sensitive employee records'}