Day 9 of the Transport for London incident
Two updates
- I’ve confirmed they’re still in containment phase, and internal services and API remain down.
- Zack Whittaker (npub1p5z…krfz) has an excellent spot - they’ve removed the statement about no evidence of customer data exfiltration, and then not commented when asked about it. https://techcrunch.com/2024/09/10/londons-transit-agency-drops-claim-it-has-no-evidence-of-customer-data-theft-after-hack/
#tfl #threatintel
Kevin Beaumont
npub1lc…6lcye
2024-09-10 18:42:35 UTC
in reply to nevent1q…ztus
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2024-09-10 18:42:35 UTCEvent JSON
{
"id": "704cd76daf2d2e44c9c87326655267de5b8172ccc492ae918003c5f014b4bd7e",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1725993755,
"kind": 1,
"tags": [
[
"e",
"4d4d6502d7759c11376362e1578da73223426216b7b5b3d93983b5baf3761968",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"1d3b8dde5a1c9f6153a3a09071d15be5d0c9d20bc627305b473b45f15452d524"
],
[
"e",
"44d53e6b7c9c87b35c3fe23ce491c7b84bee34ad2ea53bdbb3b5450d02d5f64c",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"t",
"tfl"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/113114726786611410",
"web"
],
[
"t",
"threatintel"
],
[
"p",
"0d05fcbc368e873c322780f81e96fd2130cc54fd9ddeb2a4c85425cbefc971d4"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113114726786611410",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/113114726786611410",
"pink.momostr"
],
[
"-"
]
],
"content": "Day 9 of the Transport for London incident\n\nTwo updates\n\n- I’ve confirmed they’re still in containment phase, and internal services and API remain down. \n\n- nostr:npub1p5zle0pk36rncv38srupa9hayycvc48anh0t9fxg2sjuhm7fw82q2tkrfz has an excellent spot - they’ve removed the statement about no evidence of customer data exfiltration, and then not commented when asked about it. https://techcrunch.com/2024/09/10/londons-transit-agency-drops-claim-it-has-no-evidence-of-customer-data-theft-after-hack/\n\n #tfl #threatintel",
"sig": "62393548c2f4985be1dd8c3656d10ecc3809143068759918593d9e9915dc3491dd8a77033ae37d5df14ad8da61e4ecaed7b55e38b02ed9957b390a11dc5188c5"
}