UK Government-owned train operator LNER has said the contact details and some information about the past journeys of passengers have been accessed in a cyber attack.
In a statement, the firm said: “We have been made aware of unauthorised access to files managed by a third-party supplier, which involves customer contact details and some information about previous journeys.
“Importantly, no bank, payment card or password information has been affected.
“We are treating this matter with the highest priority and are working closely with experts and with the supplier to understand what has happened and to make sure appropriate safeguards are in place.
Please see the statement below regarding a recent data incident. For more information, including an FAQ, please see: https://t.co/aLdbLbYRfD pic.twitter.com/aBlHmdepWa
— London North Eastern Railway (@LNER) September 10, 2025
“We will provide further updates as more information becomes available.”
LNER customers urged to be 'cautious' after cyber attack
LNER is now urging passengers to be “cautious of unsolicited communications, especially those asking for personal information”.
This comes after Transport for London (TfL) suffered a major cyber attack in September of last year.
LNER customers are being urged to exercise caution (Image: Getty Images) This involved the bank account numbers and sort codes of around 5000 customers being accessed.
The hack resulted in TfL restricting its online services for several weeks. Passengers were also prevented from viewing some live travel information and viewing their journey history for trips paid for by contactless cards.
Why is train operator LNER publicly owned?
LNER was established in 2018 by the Department for Transport after the previous operator, Virgin Trains East Coast, experienced some financial difficulties.
Recommended Reading:
-
Woman and three teenagers arrested for cyber attacks on M&S, Co-op and Harrods
-
Pandora issues warning to all customers following cyber security attack
-
M&S hit by Percy Pig shortage following cyber attack as shoppers left in shock
The current operator states that it has "ambitious plans" to change the face of train travel.
The firm added: "We want to create a service everybody loves, that our people are proud to work for and that helps the communities that we’re part of to flourish."
The company's name echoes that of the London and North Eastern Railway, one of the "Big Four" railway companies that operated between 1923 and 1948.