Transport for London (TfL) Data Breach
On September 1, 2024, London's public transport authority, Transport for London (TfL, tfl.gov.uk), detected a cyberattack affecting its internal systems and online customer portals.
This classification is based on a reviewed lower bound; the actual impact and severity may be higher.
Exposed Data Types
5- Names
- Email addresses
- Phone numbers
- Physical addresses
- Bank account numbers
About This Breach
According to TfL's official disclosure on September 12, 2024, unauthorized actors accessed customer names, email addresses, phone numbers, and home addresses, as well as bank account numbers and sort codes belonging to approximately 5,000 customers who had requested Oyster card refunds.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
