LNER Train Passengers Data Accessed In Cyber Attack

London North Eastern Railway (LNER) has confirmed that passenger data was accessed following a cyber attack on one of its third-party suppliers.

The breach involved unauthorized access to files containing customer contact details and information related to previous journeys.

LNER announced it was made aware of the security incident and is treating the matter with the highest priority. According to the rail operator, the compromised information is limited to customer contact details and some travel history.

The company was quick to reassure customers that no sensitive financial data, such as bank account or payment card information, was affected by the breach.

LNER Train Passengers Data

Furthermore, customer passwords remain secure as the compromised third-party system did not have access to this information.

In response to the incident, LNER is working closely with cybersecurity experts and the affected supplier to conduct a thorough investigation.

The primary goals are to understand the full scope of the unauthorized access and to ensure that appropriate safeguards are implemented to prevent similar incidents in the future.

The company has stated that it will provide further updates as more information becomes available through its investigation.

LNER’s core services, including ticket sales and train operations, are entirely unaffected by the security breach, and customers can continue to book travel and use the services as normal.

LNER has issued guidance to its customers in the wake of the breach. Passengers are advised to be cautious of any unsolicited communications they may receive, particularly those that request personal information.

These could be phishing attempts by malicious actors trying to leverage the stolen data. The company clarified that there is no need for customers to contact their banks, as no financial details were compromised.

While password data was not accessed, LNER reminded customers that maintaining strong, unique passwords and changing them regularly is always good security practice. The company is focused on managing the situation and communicating transparently with those affected.

Find this Story Interesting! Follow us on Google News, LinkedIn, and X to Get More Instant Updates.