LNER Reveals Supply Chain Attack Compromised Customer Information

LNER has confirmed that an unauthorized third party accessed customer contact details and some journey information from files managed by a third-party supplier; no payment card, bank, or password data were affected. The operator and security experts warned customers to be cautious of phishing and recommended identity protection and organisational data-discovery exercises, while government officials discussed measures to strengthen cybercrime enforcement.