Up to 13,000 drivers are facing the consequences of a severe data breach linked to a contractor of Transport for London (TfL). Russian hackers, identified as the Clop cybergang, stole sensitive information, including bank details, National Insurance numbers, and addresses, from drivers on the Ulez and Congestion Charge databases. The breach is part of a broader cyberattack affecting numerous individuals globally. TfL is actively addressing the situation, having fixed the issue and secured its IT systems, and plans to inform all affected drivers promptly.
In response to the breach, TfL is reaching out to the 13,000 drivers whose data has been compromised. A spokesperson for TfL acknowledged the incident, stating that the contractor responsible for the breach has rectified the issue, and the IT systems have been secured to prevent further unauthorized access. The Clop cybergang, known for following through on its threats, has issued a deadline for ransom negotiations, threatening to publish the stolen data if companies fail to comply. The compromised data may soon be available for sale on the dark web if the deadline passes without resolution.
The gravity of the MOVEit data breach extends beyond the immediate impact on affected drivers, highlighting the persistent threat of cyberattacks on sensitive databases. TfL’s proactive communication and mitigation efforts underscore the urgency of addressing such incidents promptly. The broader context of global cyber threats emphasizes the need for heightened cybersecurity measures to safeguard personal information and prevent unauthorized access by malicious actors.