Hang on to your bus and Tube tickets… Transport for London has suspended renewal applications for its Oyster photocards, including Zip cards, in response to the cyber attack the capital’s transport authority suffered earlier this month.

TfL announced the suspension last night, the first admission that the cyber attack has in some way affected the authority’s interactions with passengers.

TfL has overall operational control of the capital’s bus, Tube, Overground and Tram networks, setting fares and distributing cash-free Oyster payment cards. As was reported last week, TfL had become the latest public body or large corporation to be targeted by cyber criminals, prompting an investigation by the National Crime Agency.

TfL’s initial notification to passengers said that, “There is no evidence that any customer data has been compromised and there has been no impact on TfL services.”

Then came last night’s cautionary announcement, which includes the suggestion that some passengers who usually enjoy free travel on TfL services may have to pay their fares and later seek refunds.

“We are currently dealing with an ongoing cyber security incident,” TfL said in an email alert issued to tens of thousands of regular passengers.

“While the public transport network is operating as usual, our proactive efforts to protect and secure our services mean that applications for Oyster photocards, including Zip cards, have been temporarily suspended.

“We are working hard to ensure all our systems are back up and running as soon as possible.

“In the meantime:

“If you want to replace a lost photocard please call us on 0343 222 1234, Monday to Friday, 08:00-20:00 and select option 1 (charges may apply)

“If you have been unable to apply, please continue making your journeys as usual and keep a record of any fares paid. We may be able to arrange a refund once the incident has been resolved and you receive your new photocard

“If you travel using a contactless payment card, you won’t be able to access your online journey history

“Currently we are unable to issue refunds for incomplete pay-as-you-go journeys made using contactless, so always remember to touch in and out.”

And the cyber attack appears to have created a bit of a lockdown around the TfL computer system. “Many of our staff have limited access to systems and as a result, there will be some delays responding to any online enquiries.”

FREE ADS: Paid-up subscribers to Inside Croydon qualify for a free ad for their business, residents’ association or community group, just one of the benefits of being part of our online community. For more information about being an iC subscriber, click here for our Patreon page

PAID ADS: To advertise your services or products to our near 10,000 weekday visitors to the site, which is featured on Google News Showcase and followed by 16,000 on Twitter/X, email us inside.croydon@btinternet.com for our unbeatable ad rates

Inside Croydon – If you want real journalism, delivering real news, from a publication that is actually based in the borough, please consider paying for it. Sign up today: click here for more details

• If you have a news story about life in or around Croydon, or want to publicise your residents’ association or business, or if you have a local event to promote, please email us with full details at inside.croydon@btinternet.com

• As featured on Google News Showcase

• We offer FREE ads to community groups when they have members who are paid subscribers to Inside Croydon

• Our comments section on every report provides all readers with an immediate “right of reply” on all our content. Our comments policy can be read by clicking here

• Inside Croydon is a member of the Independent Community News Network

• Inside Croydon works together with the Bureau of Investigative Journalism, as well as BBC London News and ITV London

• ROTTEN BOROUGH AWARDS: In January 2024, Croydon was named among the country’s rottenest boroughs for a SEVENTH successive year in the annual round-up of civic cock-ups in Private Eye magazine