2024年,伦敦交通遭到网络攻击,揭露了多达1 000万人的数据,成为英国最大的违规事件之一。
In 2024, a cyberattack on Transport for London exposed data of up to 10 million people, making it one of the UK’s largest breaches.
2024年,伦敦运输公司遭到散射蜘蛛组织的网络攻击,破坏多达1 000万人的个人数据,包括姓名、电子邮件、电话号码和地址,使其成为英国最大的数据破解事件之一。
In 2024, Transport for London suffered a cyberattack by the Scattered Spider group, compromising personal data of up to 10 million people, including names, emails, phone numbers, and addresses, making it one of the UK’s largest data breaches.
这一破坏中断了在线服务并造成3 900万英镑的损坏,从拥有近1 500万记录、许多重复记录的数据库中暴露出数据。
The breach, which disrupted online services and caused £39 million in damages, exposed data from a database of nearly 15 million records, many duplicates.
TfL通过电子邮件通知了约710万客户,但最初没有公布全部规模,使许多人可能不知道。
TfL notified about 7.1 million customers via email but did not disclose the full scale initially, leaving many potentially unaware.
由于风险较高,约5 000名拥有牡蛎卡退款数据的客户被优先推广。
Around 5,000 customers with Oyster card refund data were prioritized for outreach due to higher risk.
信息专员办公室以适当答复为由,澄清了TfL的错失行为,但专家批评联合王国缺乏公开报告违规规模的法律要求,认为透明度是公共安全和问责制的关键。
The Information Commissioner’s Office cleared TfL of wrongdoing, citing appropriate response, but experts criticize the UK’s lack of legal requirement to publicly report breach sizes, arguing transparency is key to public safety and accountability.