UK Train Operator LNER Warns Customers of Data Breach

According to SecurityWeek, British train operator LNER has disclosed a data breach affecting customer information after hackers gained access to files held by an unnamed third-party supplier. The compromised data includes customer contact details and some information on previous journeys, while banking, payment card, and password details were not exposed because the third party does not have access to them.

LNER also said the incident has had no impact on ticket sales or train operations, and advised customers to be cautious of unsolicited communications asking for personal information. It remains unclear whether the third-party supplier was specifically targeted or was one of multiple victims of a larger attack, such as the Salesforce-Salesloft incident referenced in the report. The article notes that the breach was reported by Eduard Kovacs and dated 11 September 2025, with no further details shared at the time.