TfL admits 2024 cyberattack may have affected over 10 million people — personal customer info stolen, here's what we know so far

• TfL reportedly admits scale of 2024 cyberattack was much greater than first thought
• Around 10 million people may have had personal information stolen
• Names, email addresses, home phone numbers, mobile phone numbers and physical addresses all stolen

Transport for London (TfL) has confirmed around 10 million people had their data stolen in a 2024 cyberattack, new reports have claimed.

The BBC has reported the figures after reportedly seeing a copy of a database stolen by hacking group Scatted Spider, containing names, email addresses, home phone numbers, mobile phone numbers and physical addresses.

The attack in August 2024 caused major disruption to TfL systems, with online services and information boards all affected, and an estimated £39m in damages.