2024 Transport for London — 10M customers (Scattered Spider)
Data compromised
Names, emails, phone numbers, addresses, bank account details
Technical writeup
Transport for London suffered a major cyber attack in late August 2024 by the Scattered Spider crime group. BBC revealed the breach affected around 10 million people—one of the largest in British history. TfL notified 7.1M+ customers; exposed data included names, emails, phone numbers, addresses, and bank account details for ~5,000 Oyster/contactless users. ~£39M damages. Two British teenagers charged.
Root cause
Cyber attack; Scattered Spider hacking group