Transport for London (think MTA in New York) has been dealing with a hugely disruptive cyber incident. Details on the story from several major outlets indicate that a teenage boy (age 17) connected with notorious cybercrime group Scattered Spider has breached the critical telecom infrastructure of TFL.
TFL has responded and according to some news outlets has asked thousands (some say 30k) team members to report to the office in person and have their identity and credentials individually re-verified.
Talk about disruptive.
There are also reports that the breach ahs exposed banking and Credit Card information for some 5000 citizens relating to the TFL accounts.
Critical Infrastructure targeting has been a hot topic for the past year and we are continuing to see how quickly these attacks can occur and how disruptive they can be.
I would ask you to take a moment to consider how imactful a breach like this would be in your local municipality? How confident are you that your local officials are prepared to respond quickly and effectively?
Harden the Target, Stay Vigilant!