• Our new ticketing site is now live! Using either this or the original site (both powered by TrainSplit) helps support the running of the forum with every ticket purchase! Find out more and ask any questions/give us feedback in this thread!

TfL Cyber Security Incident

redreni

Established Member
Joined
24 Sep 2010
Messages
1,541
Location
Slade Green
I don't think anything would require them to make the system free of charge. If they had to turn it off, it'd be back to paper tickets only.
They're allowed to increase the fares (often by hundreds of percent) without following any kind of process? Are you sure?

If they are, then I suppose it's just a question of what people will put up with. I agree we ought to cut TfL some slack in the circumstances. That's why I said nothing about the contactless site being locked down for two and a half weeks. I think that's an awful lot of slack. There is such a thing as too much slack.

I agree there's no obligation to make things free or do anything that benefits passengers financially. I just don't think passengers interests should be allowed to be prejudiced either.

I'm open to TfL's suggestions of how passengers can be left no worse off than if the cyber attack hadn't succeeded. If they don't like my idea of going fareless, let them suggest an acceptable alternative.

If *they* were communicating about how they intend to deal with cases where customers are suffering detriment, I might well be reassured. As it is I am not reassured, nor do I think anybody ought to be, unless they have any relevant new information they're able to share?
 
Sponsor Post - registered members do not see these adverts; click here to register, or click here to log in
R

RailUK Forums

TheTallOne

Member
Joined
2 Jan 2024
Messages
217
Location
Birmingham
If they were forced to offer everyone free travel until it is sorted, how long would it be until they went technically bankrupt?

Or would the government just cough up the cash (which would come out of tax payer funds I guess?)

Sounds like a non-starter to me.

And for those saying give the IT people a break, well done. Yep, in these situations people are lucky to have any sort of service. And I feel for all those working long hours, stressed, tired, etc, just trying to keep moving forward with the recovery.
 

Tetchytyke

Veteran Member
Joined
12 Sep 2013
Messages
14,821
Location
Isle of Man
I'm not quite following the leap of logic between "I can't check my online account when I'm using contactless" and "due to this inconvenience TfL should let everyone get on for free".

People who don't like the inconvenience of not being able to check their online account are, of course, free to use an alternative payment method of their choosing.
 

Hadders

Veteran Member
Associate Staff
Senior Fares Advisor
Joined
27 Apr 2011
Messages
16,071
I can’t see it going to paper tickets (plus Oyster) only. There isn’t the infrastructure available to sell the volume of paper tickets required.

Similar if it went Oyster only, I doubt there’d be enough Oyster cards to satisfy demand (unless TfL has a stash somewhere).

Maybe the temporary solution, if it is required (which it isn’t as this point) is something like a bus - fixed price, touch in only required.
 

Couru

Member
Joined
28 Feb 2023
Messages
64
Location
Basingstoke
Is there any legal obligation to provide journey and purchase history? It's an inconvienience, sure, but I don't think there's any requirement to do so. Bank statements are fine as proof of purchase after all.
 

Taunton

Established Member
Joined
1 Aug 2013
Messages
11,125
At the very least, they should stop doing "Maximum Fares" (alias 'fines' to the general public) on incomplete journeys, as passengers have no way of realising this has happened, or challenging them, and that TfL have just scooped their money.
 

redreni

Established Member
Joined
24 Sep 2010
Messages
1,541
Location
Slade Green
I'm not quite following the leap of logic between "I can't check my online account when I'm using contactless" and "due to this inconvenience TfL should let everyone get on for free".

People who don't like the inconvenience of not being able to check their online account are, of course, free to use an alternative payment method of their choosing.
There's no such leap of logic since I have not arrived at that conclusion. Nobody to my knowledge is saying that's what TfL should do. Just that it's something they could do if they are not able to think of anything else acceptable. I don't regard the status quo as remotely acceptable and I am shocked that anybody does.

If you think it's a mere inconvenience, perhaps you're not aware of the range of services currently unavailable or haven't thought through enough different use cases to realise that a substantial number of people are going to be out of pocket, and/or it will be much more difficult for them to detect errors in TfL's favour and still more difficult to get refunds within any kind of reasonable timescale?

We've had an informed opinion expressed on here that nobody will be out of pocket 'long term' (whatever that means), but to my mind this misses the point that people shouldn't even be out of pocket short-term. And more to the point, why isn't TfL giving that assurance? Rather than it being left to members of this forum to speculate?


I can’t see it going to paper tickets (plus Oyster) only. There isn’t the infrastructure available to sell the volume of paper tickets required.

Similar if it went Oyster only, I doubt there’d be enough Oyster cards to satisfy demand (unless TfL has a stash somewhere).

Maybe the temporary solution, if it is required (which it isn’t as this point) is something like a bus - fixed price, touch in only required.
No, the system can't operate if these IT systems break.

I'm not even that old, and I've lived in major cities where they had a highly efficient, flat fare system that had absolutely no reliance on anything that could be hacked. Toronto, for example, had flat fares across bus, tram and subway, collected by way of mechanical turnstiles operated by tokens on the subway, and cash, tokens or prepaid tickets on buses and trams. There were in-station interchanges (including between modes, where possible) and paper transfers otherwise. The main technology underpinning paper transfers was the bulldog clips needed to allow bus and tram drivers to tear off the paper transfer at the right point to indicate the time of issue. The technology didn't change from the 60s to the early 2010s. All designed to be far more efficient than the system that preceded London's PAYG system. All invulnerable to hacking.

TfL chooses not to have a system like that, so it's up to them to suggest an acceptable way of collecting fares when the means of accounting and redress are unavailable to passengers.

I'm raising the possibility that TfL can no longer collect the fares in London without a functioning contactless PAYG system because it appears to be the case.

If they wanted to switch to Oyster they'd need to drop the charge for the cards, I would suggest, and after a few hours I can't imagine people would be able to get hold of one for love or money. TfL put itself in this position; my view is I'm not obliged to accept that the current unsatisfactory situation should be allowed to go on, just because TfL hasn't got a contingency plan.
 

MikeWh

Established Member
Associate Staff
Senior Fares Advisor
Joined
15 Jun 2010
Messages
8,055
Location
Crayford
The way the machines are loaded with fares is a manual on-site job that has to be arranged far in advance with Cubic (as we saw with the LU machines selling national rail fares at the old price for ages after the fares change, because the new fares weren't distributed in time for Cubic's snail schedule)
They aren't loaded manually, but if the data isn't available in time for testing prior to rollout then it doesn't get updated. Base data updates like this can only be scheduled for specific times given that other minor updates to systems have to be frozen while the base update takes place.
Is there any legal obligation to provide journey and purchase history? It's an inconvienience, sure, but I don't think there's any requirement to do so. Bank statements are fine as proof of purchase after all.
Try giving just a line on your bank statement to HR as evidence of a travel claim.
There's no such leap of logic since I have not arrived at that conclusion. Nobody to my knowledge is saying that's what TfL should do.
You may not have technically arrived at that conclusion, but
What I'm saying TfL should be told is: operate an adequate system with proper safeguards against and mitigations for errors and overcharging, or else you have to turn the whole system off and open the gates.
If they don't like my idea of going fareless, let them suggest an acceptable alternative.
the above two quotes certainly give that impression.

This is not to say that I am in agreement with what is happening. If it lasts too long then they surely will have to have a method of refunding some overcharges, or a commitment to pay bank overdraft or interest charges if these have been triggered. It must surely be possible to allow one trusted person access to the system to interrogate history and agree refunds?

Finally, to put to bed the idea of free travel. In a lot of cases TfL are collecting fares on behalf of TOCs (on behalf of the DfT). Thus they are not in a position to decide unilaterally what to do. And if the system was switched off, with no requirement to charge fares at all, is the DfT going to be happy with everyone from South Wales and the West Country being able to buy tickets to Reading and then travel free? And if it's the gates that are switched off, how are the TOCs going to protect revenue for all journeys made from Reading away from London (or towards Feltham/Guildford)? It is just not going to happen.
 

Taunton

Established Member
Joined
1 Aug 2013
Messages
11,125
Well I have just gone through and tried to reconcile, starting with the bank statement. I always used the history facility before. What a mess. There are various transactions coming through, half are "Transport for London", and the other half are "TFL TRAVEL CHARGE". Multiple ones of each on the same day, all stated "Contactless", which I always presumed were consolidated to one per day for capping. Also they are not necessarily charged the day after travel; charges on 16 September are for "On 12 September", while charges on 14 September are for "On 13 September". Furthermore there are a series of charges which we just can't explain.

Going to check what current fares are, I find the onetime useful table between zones has been done away with, now the Single Fare Finder for PAYG has been reduced to a Janet & John style, where one needs to just put in From and To stations. Except once done, "Show Single Fares" then does nothing. Presumably this is something else withdrawn/broken due to the cyber attack, but there is no message. So we have absolutely no clue about how the charges might have been calculated.
 

MikeWh

Established Member
Associate Staff
Senior Fares Advisor
Joined
15 Jun 2010
Messages
8,055
Location
Crayford
Except once done, "Show Single Fares" then does nothing.
Try scrolling down. I find on my laptop that the screen appears not to change, but the content below the fold has been updated silently.

Alternatively you could use my fare-finder.
 

redreni

Established Member
Joined
24 Sep 2010
Messages
1,541
Location
Slade Green
Well I have just gone through and tried to reconcile, starting with the bank statement. I always used the history facility before. What a mess. There are various transactions coming through, half are "Transport for London", and the other half are "TFL TRAVEL CHARGE". Multiple ones of each on the same day, all stated "Contactless", which I always presumed were consolidated to one per day for capping. Also they are not necessarily charged the day after travel; charges on 16 September are for "On 12 September", while charges on 14 September are for "On 13 September". Furthermore there are a series of charges which we just can't explain.

Going to check what current fares are, I find the onetime useful table between zones has been done away with, now the Single Fare Finder for PAYG has been reduced to a Janet & John style, where one needs to just put in From and To stations. Except once done, "Show Single Fares" then does nothing. Presumably this is something else withdrawn/broken due to the cyber attack, but there is no message. So we have absolutely no clue about how the charges might have been calculated.
The table of fares between zones was withdrawn when Boris Johnson broke the fare structure.

The fare between any two zones now depends if it's National Rail only, TfL only or mixed mode, and I'm not sure but think there may be different fare scales for different non-TfL National Rail lines.

Hence it's absolutely essential that the single fare finder is always available, or people can't find out what the fares are.
 

MikeWh

Established Member
Associate Staff
Senior Fares Advisor
Joined
15 Jun 2010
Messages
8,055
Location
Crayford
Hence it's absolutely essential that the single fare finder is always available, or people can't find out what the fares are.
As I pointed out above your post, the single fare finder is available. It is entirely possible to click "Show single fares" and not realise that only content below the fold has been updated.
 

Taunton

Established Member
Joined
1 Aug 2013
Messages
11,125
Try scrolling down. I find on my laptop that the screen appears not to change, but the content below the fold has been updated silently.

Alternatively you could use my fare-finder.
You are correct. Thank you. Incidentally, I find yours is far better laid out :) .

If my IT team at the office came up with that for our customers I would be telling them to start again. If the whole of TfL's team have such standards it's possibly understandable both how they got into this mess and appear not to know how to get out of it. I wonder if their Director of IT is considering their position.
 

infobleep

Veteran Member
Joined
27 Feb 2011
Messages
13,435
One would certainly hope and expect so.

There are some of us, however, who don't regard overcharging customers and then giving them their money back within a couple of days provided they notice and ask for it to be corrected as a particularly satisfactory system to begin with. That's what happens currently with the buggy and badly designed gatelines at places like Custom House and Waterloo (W&C).

Making the customer wait weeks or months before even being able to check, let alone ask for a correction to be made, strikes me as so very far from satisfactory, that I question seriously why it's being allowed to go on happening?
Well on Oyster with a discount applied, you couldn't even deal with refunds online and would even be told there was nothing wrong. I no longer have a discount applied to my Oyster card.
 

James H

Established Member
Joined
25 Jun 2014
Messages
1,296
The London Assembly Transport Committee will receive an update on Thursday lunchtime

From the press release
From 12.30 pm, the Committee will hear how TfL is trying to help passengers affected by the impact of the recent cyber-attack.

The ongoing impacts of the attack include passengers being unable to apply for or renew discounted Oyster passes, and delays to the rollout of contactless payments to 47 stations.

The meeting will take place on Thursday 26 September from 10am, in the Chamber at City Hall, Kamal Chunchie Way, E16 1ZE.

Media and members of the public are invited to attend.

The meeting can also be viewed LIVE or later via webcast or YouTube.
 

Taunton

Established Member
Joined
1 Aug 2013
Messages
11,125
It was disappointing that nothing was particularly said beyond what is already in public statements.

One thing was the description that staff have been given "extra discretion" about those without current cards etc, an example given being the frequency with which schoolchildren lose them and need replacements, currently not being provided. But this is quite at variance with the constant messaging around the system about the need to have valid tickets etc at all times.
 

Taunton

Established Member
Joined
1 Aug 2013
Messages
11,125
Then I don't understand what the senior officials were telling the committee members about "extra discretion" that staff had been given. I had certainly seen no public announcement about this (or any other easement, come to that). Do you think they were making it up as they were going along?
 

Joe Paxton

Established Member
Joined
12 Jan 2017
Messages
2,720
Then I don't understand what the senior officials were telling the committee members about "extra discretion" that staff had been given. I had certainly seen no public announcement about this (or any other easement, come to that). Do you think they were making it up as they were going along?

No, but perhaps you are?
 

Russel

Established Member
Joined
30 Jun 2022
Messages
2,364
Location
Whittington
I wouldn't expect TfL to be in a position to say when everything will be back to 'normal' any time soon, I used to work for a company that suffered a major cyber attack, it took around 3 months before we could return to something that looked like business as usual and then another 12 months to iron out all the smaller, resulting issues that kept coming to light...
 

sh24

Member
Joined
28 Sep 2023
Messages
605
Location
London
As a Londoner and pretty much daily tube user, I had no idea about the cyber attack until I saw this thread. I'd say TfL are handling things pretty well as a result!
 

redreni

Established Member
Joined
24 Sep 2010
Messages
1,541
Location
Slade Green
As a Londoner and pretty much daily tube user, I had no idea about the cyber attack until I saw this thread. I'd say TfL are handling things pretty well as a result!
I don't think you're alone in that by any means.

As an occasional contactless PAYG user I always reconcile what I know the fares to be against what I've been charged. I certainly noticed when I could no longer access my journey history as that's the easiest way to check. I've known this check to reveal gaps in my knowledge of the fares (where I had expected to be charged one amount but was actually charged another, and it turned out it was my expectation rather than the charge itself that was wrong). I've also known it to reveal errors on TfL's side, some of which have required intervention by me to put right.

While it would still be possible to reconcile things by checking what I've paid on my credit card against what I had expected, during this time I have switched over to oyster PAYG so that I can still get journey history information easily online or at TVMs.

I appreciate this may feel like a non-issue to those who (correctly, in most cases) consider that it's not worth their time to check and sort out any glitches or overcharging. I do wonder, however, if next time TfL finds itself in a financial crisis, it might consider just helping itself to extra money from those regular contactless PAYG users who have a record of never logging into their account or querying anything? In fact, other than somebody on the inside blowing the whistle, it's hard to see how we would even know in the purely imaginary scenario where TfL was already doing this. I can't say I'd have all that much sympathy for people who can afford not to know or care what they're spending.
 

Dent

Established Member
Joined
4 Feb 2015
Messages
1,200
As a Londoner and pretty much daily tube user, I had no idea about the cyber attack until I saw this thread. I'd say TfL are handling things pretty well as a result!
All that shows is that you have been luck enough not to need any of the services which have been affected. The experience of people who have needed these services shows that it has not been handled well.
 

Chriso

Member
Joined
7 Dec 2006
Messages
431
I’m back on Oyster until this is resolved and I can see the history.
 

Ghostbus

On Moderation
Joined
17 Sep 2024
Messages
331
Location
England
I don't suppose there will ever be any explanation as to the specifics of the attack, short of assisting any future attackers of course. Did a staff member make a mistake, or was a software product insecure by design or lack of update, that sort of thing. Is this covered by FOI?
 

sh24

Member
Joined
28 Sep 2023
Messages
605
Location
London
All that shows is that you have been luck enough not to need any of the services which have been affected. The experience of people who have needed these services shows that it has not been handled well.

Maybe - but I discussed this with a few colleagues today all of whom were similarly unaware. I don't doubt that some specific user groups have been impacted but the vast, vast majority of passengers have experienced no issues.

I've worked with suppliers who have been hit with cyber attacks and they certainly weren't coping as well a month in.
 

Couru

Member
Joined
28 Feb 2023
Messages
64
Location
Basingstoke
I don't suppose there will ever be any explanation as to the specifics of the attack, short of assisting any future attackers of course. Did a staff member make a mistake, or was a software product insecure by design or lack of update, that sort of thing. Is this covered by FOI?
Nah, FOI wouldn't get you anywhere. Part II Section 31a states "information... is exempt information if its disclosure under this Act would, or would be likely to... prejudice the prevention or detection of crime". 24(1) provides for a national security exemption to

An incident report would include pretty heavy information about TfL's network infrastructure, which they'll obviously wanna keep quiet. I'd be slightly surprised if they didn't eventually give some sort of root cause, but one can read between the lines and assume it was some sort of access control failure (evidenced by IT having to in-person review people's access).

Nah, FOI wouldn't get you anywhere. Part II Section 31a states "information... is exempt information if its disclosure under this Act would, or would be likely to... prejudice the prevention or detection of crime". 24(1) provides for a national security exemption to
Another bit of relevant caselaw - the ICO explicitly said details about cyber attacks fall under section 31 in 2016, when someone tried to ask the Bank of England for details about all their breaches since 2010 (yes, really).
 

bakerstreet

Member
Joined
29 Nov 2009
Messages
1,066
Location
-
Oyster app and website won’t allow Oyster top ups

I’m writing this in here, but I’m not sure if it’s connected to the original incident.

I tried to top up my Oyster today on both the TfL app and the website.

Payments were taken and then immediately sent back.

My bank confirmed it is not them rejecting the payments, TfL systems are refusing them.

The Oyster helpline confirms they are currently having an issue where nothing can be done to add credit to an Oyster card online.
Everything must be done in person at a railway/tube station (they did not mention local agents)

I can’t even set up for my Oyster to auto top up.

I now have four pending payments on my banking app (which I know - hope - will drop off in the next few days).
 

Top