← All storiesGeneralDeveloping story

2024 TfL hack affected around 10 million people, BBC can reveal

Around 10 million people had their data stolen when Transport for London (TfL) was hacked in 2024, the BBC has discovered, making it one of the biggest hacks in British history. At the time the company only disclosed that "some" customers had been affected, but has now confirmed that millions of people had their personal data taken. The cyber-attack, by hackers from the so-called Scattered Spider crime group, breached TfL's internal computer systems, disrupting its online services and causing £39m in damages. The hackers downloaded a database containing customer information - and by seeing a copy of the file BBC News has established the scale of the hack. TfL insisted to the BBC it has "kept customers informed throughout this incident and will continue to take all necessary action". The attack, which took place between late August and early September 2024, did not directly impact London transport but saw many TfL online services and information boards go offline. The trial of two British teenagers accused of carrying out the hack is set to begin in June. The BBC was contacted by someone in the hacking community who obtained a copy of the full TfL database. It contains names, email

3
updates in timeline
1
distinct sources
11 days
story span
Mar 17, 2026
latest update

Mar 6, 2026 → Mar 17, 2026

LATEST DEVELOPMENT
Mar 17, 2026·BBCT2 · Outlet report
Parents want Bright Horizons to be held accountable after Vincent Chan abuse

A group of parents whose children attended a nursery where abuse was carried out say the council's unwillingness to investigate is "rubbing salt into an open wound". Last month, Vincent Chan was jailed for 18 years after admitting 56…

Read original at BBC →
ACTIVITY · UPDATES PER MONTH
Mar 26

3 updates from 1 source over 11 days.

Showing 3 of 3 updates

Timeline (3 updates)

March 2026

3 updates
Mar 17, 2026·BBCT2 · Outlet reportLATEST
Parents want Bright Horizons to be held accountable after Vincent Chan abuse

A group of parents whose children attended a nursery where abuse was carried out say the council's unwillingness to investigate is "rubbing salt into an open wound". Last month, Vincent Chan was jailed for 18 years…

Read original at BBC →
Mar 6, 2026·BBCT2 · Outlet reportKEY MOMENT
Person killed by Ickenham Tube blocked from safety spot by cables

A passenger who fell onto a London Underground track was unable to avoid being hit and killed by a train due to communication cables preventing them moving to a place of safety, an investigation has found. CCTV showed…

Read original at BBC →
Mar 6, 2026·BBCT2 · Outlet reportOPENING
2024 TfL hack affected around 10 million people, BBC can reveal

Around 10 million people had their data stolen when Transport for London (TfL) was hacked in 2024, the BBC has discovered, making it one of the biggest hacks in British history. At the time the company only disclosed…

Read original at BBC →

Sources & evidence (3)

What this story stands on. Tier 0 is a primary record or the subject's own words; higher tiers must be attributed, never stated as bare fact.

T2 · Outlet report× 3
COVERAGE BY SOURCE
BBC 3
STRONGEST EVIDENCE
T2 · Outlet reportBBCMar 17, 2026

A group of parents whose children attended a nursery where abuse was carried out say the council's unwillingness to investigate is "rubbing salt into an open wound". Last month, Vincent Chan was jailed for 18 years after admitting 56…

View source →
T2 · Outlet reportBBCMar 6, 2026

A passenger who fell onto a London Underground track was unable to avoid being hit and killed by a train due to communication cables preventing them moving to a place of safety, an investigation has found. CCTV showed the passenger was…

View source →
T2 · Outlet reportBBCMar 6, 2026

Around 10 million people had their data stolen when Transport for London (TfL) was hacked in 2024, the BBC has discovered, making it one of the biggest hacks in British history. At the time the company only disclosed that "some" customers…

View source →

Tier key: T0 = Primary source · T1 = Wire · T2 = Outlet report · T3 = Commentary

Related stories

GeneralT2 · Outlet report

No more US military aid to Israel | Bernie Sanders

The time is long overdue for members of Congress to listen to the American people and end US military aid to the extremist Netanyahu government I am a proud Jewish American. My…

7 updates4 sources3 weeks long
Apr 15, 2026 → May 6, 2026
Latest: Live updates: Iran reviewing US proposal as source says both sides moving toward memo to end war | CNN · CNN
GeneralT2 · Outlet report

Black children in England and Wales almost eight times more likely to be strip-searched than white peers – report

Demographic also overrepresented when police officers use force such as handcuffs, firearms or Tasers, says children’s commissioner Black children across England and Wales are…

11 updates2 sources2 weeks long
Apr 21, 2026 → May 5, 2026
Latest: Zack Polanski falsely claimed to be British Red Cross spokesperson, charity says · The Guardian
GeneralT2 · Outlet report

The UK’s radical ‘Preston model’ faces an uncertain future with local elections looming | Andy Beckett

A Lancashire council tries hard to keep wealth and power in the area, despite such ideas being out of fashion in Westminster. But Reform could unravel it all What legacy will…

11 updates2 sources2 weeks long
Apr 20, 2026 → May 5, 2026
Latest: Wales is a basket case, Reform's Nigel Farage says at final Senedd rally · BBC
TechnologyT2 · Outlet report

Thousands of Computer Viruses Are Created Every Day. Here’s How to Protect Your Computer From Cyberattacks - CNET

Our gifting experts are obsessively searching for holiday gifts that are unique, thoughtful and suitable for any budget. Our expert, award-winning staff selects the products we…

3 updates3 sources3 weeks long
Apr 17, 2026 → May 5, 2026
Latest: Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack · Ars Technica
GeneralT2 · Outlet report

Four Labour activists charged with trying to fix candidate selection process

Police bring criminal case over alleged manipulation of party database in Croydon East constituency Four Labour activists have been charged over allegations that a party database…

11 updates3 sources2 weeks long
Apr 21, 2026 → May 5, 2026
Latest: Police investigate suspected arson attack at former synagogue in east London · The Guardian
GeneralT2 · Outlet report

Londonderry's Fountain estate residents 'scared' following stone throwing attack

Residents of Londonderry's Fountain estate have been left feeling "scared and intimidated" after reports of homes being attacked by stone-throwing youths, an assembly member has…

2 updates1 source
May 5, 2026
Latest: Showjumper Katie Simpson's death exposed 'institutional misogyny' in PSNI · BBC