Attacker steals customer data from Brit rail operator LNER during break-in at supplier

London North Eastern Railway (LNER) disclosed that customer contact details and some journey information were accessed via a breach at a third-party supplier; no bank, payment card, or password data was reported exposed. The company is investigating, has not identified the responsible party, and warns customers to be cautious of potential phishing; the incident may be related to broader Salesloft/Drift supply-chain compromises but this is unconfirmed.