World

Cybersecurity incident disrupts wifi at UK railway stations

An investigation is underway after twenty stations managed by Network Rail were targeted.
 
An investigation is underway after twenty stations managed by Network Rail were targeted.
LONDON: A cyber attack has hit public wifi at some of the biggest railway stations in Britain, including Manchester Piccadilly, Birmingham New Street, Edinburgh Waverley, Glasgow Central and 10 stations in London.

They were all affected by the attack on Wednesday, which saw passengers trying to log on being greeted by messages about terror attacks in Europe, according to reports.

The Manchester Evening News said the wifi webpage after the hack displayed, 'We love you, Europe', and contained information about terror attacks.

Network Rail, which manages the stations, has suspended wifi services at stations across the country following what it described as a 'cyber security incident'. A Network Rail spokesperson said: 'We are currently dealing with a cyber security incident affecting the public wifi at Network Rail's managed stations.

'British Transport Police are investigating the incident.

'This service is provided via a third party and has been suspended while an investigation is under way.'

British Transport Police said: 'We received reports at around 5:03 pm yesterday of a cyber attack displaying Islamophobic messaging on some Network Rail wifi services. We are working alongside Network Rail to investigate the incident at pace.'

Telent, the third-party firm that provides wifi for Network Rail, said it was also investigating the incident.

'We are aware of the cybersecurity incident affecting the public wifi at Network Rail's managed stations and are investigating with Network Rail and other stakeholders,' a company spokesperson said.

'We have been informed there is an ongoing investigation by the British Transport Police into this incident, so it would not be appropriate to comment further at this stage.'

According to its website, Telent helps design, build, support and manage some of the UK's 'critical digital infrastructure', and its other customers include Openreach, Transport for London (TfL), National Highways, the Maritime and Coastguard Agency and the NHS Ambulance Radio Programme.

It has not yet been confirmed if any of Telent's other customers have been impacted by the incident. Jake Moore, global cybersecurity adviser at Eset, said the incident appeared to be an attempt to draw attention to a lack of security, rather than a 'genuine threat'.

'Cyber attacks often occur in stealth mode and attempt to carry out activities without anyone noticing anything until the real damage is complete,' he said. — dpa