Transport for London (TfL)

In a targeted cyber attack on **Transport for London (TfL)**, two teenagers—**Thalha Jubair (19) and Owen Flowers (18)**—were charged under the **Computer Misuse Act** for orchestrating unauthorized acts that disrupted critical services. The attack, which unfolded over **three months**, severely impacted TfL’s operational infrastructure. Key disruptions included: - **Real-time Tube information** becoming unreliable or inaccessible, causing commuter confusion and delays. - **Online journey history** being compromised, affecting user records and travel data integrity. - **Payment systems on the Oyster app** experiencing outages, hindering fare processing and potentially leading to financial inconvenience for passengers. The prolonged disruption underscored vulnerabilities in TfL’s digital infrastructure, raising concerns about the resilience of public transport cybersecurity. While no evidence suggests **data theft or ransomware demands**, the attack’s **operational and financial repercussions**—including reputational damage and service degradation—highlighted the broader risks posed by cyber threats to essential urban services. The case remains under legal proceedings, with a trial scheduled for **June 2026**.

Source: https://www.bbc.com/news/articles/cj97ekz07ezo

TPRM report: https://www.rankiteo.com/company/transport-for-london

"id": "tra4592245102425",
"linkid": "transport-for-london",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'transportation',
                        'location': 'London, UK',
                        'name': 'Transport for London (TfL)',
                        'type': 'government agency'}],
 'description': 'Two teenagers, Thalha Jubair and Owen Flowers, were charged '
                'with conspiring to commit unauthorised acts under the '
                'Computer Misuse Act in connection with a 2023 cyber attack on '
                'Transport for London (TfL). The attack disrupted live Tube '
                'information, online journey history, and payments on the '
                'Oyster app for three months.',
 'impact': {'downtime': '3 months',
            'legal_liabilities': ['charges under the Computer Misuse Act'],
            'operational_impact': 'disruption to services including real-time '
                                  'updates and payment processing',
            'systems_affected': ['live Tube information',
                                 'online journey history',
                                 'payments on the Oyster app']},
 'investigation_status': 'ongoing (trial scheduled for 8 June 2026)',
 'references': [{'source': 'News report (unspecified)'}],
 'regulatory_compliance': {'legal_actions': ['criminal charges filed against '
                                             'Thalha Jubair and Owen Flowers'],
                           'regulations_violated': ['Computer Misuse Act']},
 'response': {'law_enforcement_notified': True},
 'threat_actor': ['Thalha Jubair', 'Owen Flowers'],
 'title': 'Cyber Attack on Transport for London (TfL)',
 'type': ['cyber attack', 'unauthorised access', 'disruption']}