United Kingdom
GBR
Go-Ahead cyberattack disrupts bus rostering systems
Go-Ahead detected unauthorized network activity on September 5, 2022, leaving certain IT and back-office functions, including software used to schedule buses and drivers, unavailable. The operator activated fallback arrangements to maintain bus services; it stated that passenger bus and rail services were operating normally, so the documented impact is on service planning rather than confirmed passenger transport interruption.
67
Estimated severity
67 / 100
87
Source reliability
87 / 100
Approximate Date
2022-09-05
Targeted Company
GO-AHEAD
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United Kingdom
Affected countries
United Kingdom
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionPlanning or scheduling disruption
Affected sectors
Transportation
Affected departments
Information TechnologyLogistics & Transportation
Attack Profile
Attack types
Unauthorized access
Attributed threat actors
No information
Sources
Incident Sources
theguardian.comhttps://www.theguardian.com/business/2022/sep/06/go-ahead-cyberattack-bus-services-thameslink-railnews.sky.comhttps://news.sky.com/story/threat-of-go-ahead-bus-disruption-as-company-manages-cyber-security-incident-12691039computerweekly.comhttps://www.computerweekly.com/news/252524613/Bus-company-Go-Ahead-fighting-off-cyber-attack