How Did Two Teenagers Cause Transport for London £29 Million in Losses

A cyberattack does not need to stop trains physically to cause enormous disruption. Once essential digital systems become untrustworthy, an organisation may have to disable them before the damage spreads.

That defensive response can affect staff, customers and services long after the attackers lose access. The scale of the final bill becomes clearer when each stage of the incident is examined.