TfL cyber attack and response that saw Oyster services down to be investigated

An independent investigation will be launched into the cyber attack on Transport for London (TfL) and the subsequent response by the authority.

The cyber attack, which occurred on August 31, has had lingering effects for months, with TfL only recently resuming applications for new Oyster photocards after suspending them as a security measure to fend off further attacks.

While maintaining that the incident did not majorly 'disrupt core operations', documents released on ahead of a board meeting disclosed plans for an 'independent review'.

READ MORE: TfL asks Government for new powers to tackle e-bike parking issues

READ MORE: Parents to protest after West London school's disability resource to be shut by council

“Given the nature and scale of the cyber incident, an independent review will be conducted to consider the circumstances surrounding the incident and the impact, our response to the incident, and whether further improvements are needed to our cyber security strategy, taking into consideration existing initiatives that are in progress,” the papers state.

“As the cyber incident is ongoing and the subject of a criminal investigation by the NCA [National Crime Agency], the review may be undertaken in phases. The review will be overseen by members of our Board.”

The papers add: “We are continuing to work with the NCA and NCSC [National Cyber Security Centre] to conduct a thorough investigation into the incident and the NCA has confirmed that one arrest has been made to date.

“Partners (including the NCSC, NCA and Microsoft) have stated their view that we responded well to the incident and disrupted the attack to some extent, potentially preventing a far worse outcome.

“Our investigations identified that some limited customer data had been accessed. We contacted around 5,000 customers whose bank account details were accessed as a precautionary measure to offer them support and guidance.”

At a meeting of the London Assembly’s oversight committee on Wednesday, TfL’s chief technology officer, Shashi Verma, provided an update on the re-opening of Oyster photocard applications.

He said: “We’re working to process all applications as quickly as possible and have already processed and dispatched more than 30,000 18+ Oyster student photocards, more than 10,000 60+ Oyster photocards and nearly 600 Apprentice photocards since the applications reopened.

“Once new photocards have been applied for, where possible, credit remaining on expired Oyster photocards can be transferred across to new photocards by contacting our customer services team.

“Customers are also advised to keep a record of any fares that they should be refunded. We’re beginning to work through our refunds for some of our customers, and are working in a priority order, starting with the oldest cases first.”