Request ID: FOI-1180-2324 Date published: 04 August 2023
You asked
Please can you provide a breakdown of cyber attacks or suspected cyber attacks on the organisation since the beginning of 2021, including the following information:
i) Date of attack
ii) Action taken
iii) Impact on operations/service/data
We answered
Our Ref: FOI-1180-2324
Thank you for your request received on 17 July 2023 asking for information about cyber-attacks against TfL.
Your request has been considered in accordance with the requirements of the Freedom of Information Act and our information access policy. I can confirm we do hold the information you require. You asked:
In accordance with the FOI Act we are not obliged to supply this information as it is subject to a statutory exemption to the right of access to information under section 24 (National security) and section 31(1) (Prevention and detection of crime).
In this instance the exemptions apply as disclosure of the information you have requested would describe our current state of readiness to prevent and detect cyber-attacks and the success or failure of attempts by persons unknown to unlawfully access or disrupt our information networks, which are critical to the operation of London’s transport system. The London transport system is a critical piece of national infrastructure and as such we employ rigorous safeguards to protect it from cyber-attack. Like other organisations we are subject to attempted cyber-attacks. These attacks are unlawful under the Computer Misuse Act, and whilst the motive is not always apparent, we are aware of the risk to critical national infrastructure that may result from a successful attack.
We consider that releasing information about the type of attacks that we are able to detect would be likely to prejudice our efforts to prevent and detect future attacks and undermine our ability to safeguard the London transport network.
The use of these exemptions is subject to an assessment of the public interest in relation to the disclosure of the information concerned. We recognise the need for openness and transparency by public authorities, but in this instance we consider that there is greater public interest in safeguarding our information systems and protecting the integrity of the London transport network.
If this is not the information you are looking for please feel free to contact me.
Please see the attached information sheet for details of your right to appeal.
Yours sincerely
Gemma Jacob Senior FOI Case Officer FOI Case Management Team General Counsel Transport for London
