Cyber Attack Exposes LNER Train Passengers’ Personal Data

London North Eastern Railway (LNER) has confirmed an unauthorized breach at one of its third-party suppliers exposed the contact details and travel histories of some passengers. No banking or password data were involved, and passwords and login credentials were unaffected. On 10 September 2025, LNER discovered that files managed by a contractor had been accessed without permission; these files contained names, email addresses, phone numbers, and records of previous journeys.

The supplier maintains ticketing and customer communications systems on LNER’s behalf. LNER says it is treating the incident with the highest priority and is working with experts to investigate the breach’s scope and to prevent a recurrence, while reviewing contractual security standards with all suppliers and expanding monitoring of its information systems.

Passengers whose details were exposed are advised to remain vigilant against phishing emails and calls, and to report unsolicited requests for personal or financial data to relevant authorities.