Northern Rail, a U.K. railway was targeted in a ransomware attack which caused an outage to the servers operating the machines and disturbed its operations.
They deactivated its self-service ticket machines to avoid any mishappenings.
The company initiated investigations and asked the customer to purchase tickets at the ticket offices or the company app or website.
Source: https://www.kioskmarketplace.com/news/suspected-ransomware-attack-shuts-uk-railway-ticket-machines/
TPRM report: https://scoringcyber.rankiteo.com/company/northerntrains
"id": "nor31116322",
"linkid": "northerntrains",
"type": "Ransomware",
"date": "07/2021",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"{'affected_entities': [{'industry': 'Transportation',
'location': 'U.K.',
'name': 'Northern Rail',
'type': 'Railway Company'}],
'attack_vector': 'Ransomware attack on servers',
'description': 'Northern Rail, a U.K. railway was targeted in a ransomware '
'attack which caused an outage to the servers operating the '
'machines and disturbed its operations. They deactivated its '
'self-service ticket machines to avoid any mishappenings. The '
'company initiated investigations and asked the customer to '
'purchase tickets at the ticket offices or the company app or '
'website.',
'impact': {'operational_impact': 'Disturbance in operations',
'systems_affected': 'Self-service ticket machines'},
'response': {'communication_strategy': 'Asked customers to purchase tickets '
'at the ticket offices or the company '
'app or website',
'containment_measures': 'Deactivated self-service ticket '
'machines'},
'title': 'Northern Rail Ransomware Attack',
'type': 'Ransomware'}