TfL Transport for London
Sep 2024 · Graded Attested · Transportation and Logistics · Beyond the filings
Incident summary
TfL Transport for LondonSep 2024
£29M
Spent responding & recovering
Direct expense
Scattered Spider exfilitrated 15 million lines of user data and then exposed the user data of 10 mm customers. The stolen database included names, contact details, home addresses, and Oyster refund data containing banking details and sort codes for about 5,000 customers
Losses on the record
£10M
Orders & sales lost
Business interruption
These measure different things and are never added together.
See the full accounting
Business interruption · realized£10M · A
Direct expense · realized£29M · A
Shown individually, never summed across measures.
Attested: a published report credits an identifiable source for this figure.
Company announcement
Initial attack type not disclosed · Impact data theft confirmed · Actor Scattered Spider
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The categorized losses on the record carry their own sources.
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.