London North Eastern Railway (LNER) has issued a warning to passengers to remain vigilant after a cyber-attack on a third-party supplier exposed customer contact details and some journey history. The operator has assured the public that no financial data, passwords, or ticketing systems were compromised and that train services are continuing as normal.
The breach, which LNER is treating with the utmost priority, underscores the increasing threat of cyber-attacks on UK transport operators and their supply chains. Although the supplier involved did not have access to bank or payment records, LNER has advised customers to be cautious of unsolicited emails or messages, especially those requesting personal information.
This incident adds to a series of high-profile hacks affecting UK businesses and transport services. Last year, Transport for London experienced a cyber breach impacting financial data for 5,000 customers, and earlier this month, Jaguar Land Rover’s production was disrupted by a ransomware attack. Retailers such as Marks & Spencer, Harrods, and the Co-op have also been targeted this year.
LNER is collaborating with cybersecurity experts and the supplier involved to determine the full extent of the breach and to implement additional security measures. Updates will be provided as the investigation progresses.



