Travel Expert Issues Warning to UK Commuters Following Cyber Attack on Major Train Stations

British commuters are being urged to remain vigilant after a cyber-security attack targeted 19 major railway stations across the UK, including London Euston, Manchester Piccadilly, and Liverpool Lime Street.

The hack, which took place last week, redirected rail passengers attempting to access station websites to a page displaying Islamophobic messages.

Network Rail, which manages the affected stations, has since launched an investigation into the incident.

Experts at London Tickets & Tours have issued travel warning news for travellers to take extra precautions when using public wi-fi in busy urban areas and train stations.

Magdalena Petrusic, a travel expert from London Tickets & Tours, cautioned that the public wi-fi networks commonly available at train stations present significant risks to commuters’ personal data.

“Using public wi-fi when travelling through any train station is risky,” said Petrusic. “Many public wi-fi networks are unencrypted, meaning data transmitted over the network can be intercepted by hackers. This includes sensitive information like passwords, usernames, and personal details. It’s always safer to use your personal data instead of relying on public hotspots, which could be fake.”

Petrusic also highlighted the importance of using a Virtual Private Network (VPN) if passengers must use public wi-fi, as VPNs encrypt data, making it much more difficult for hackers to access.

To help British travellers stay safe from scams and potential cyber threats, Petrusic has shared five essential tips for avoiding common travel scams:

1. Wi-fi Scams

In high-traffic tourist areas like London or Manchester, scammers often set up fake public wi-fi networks to steal personal information. By connecting to these networks, travellers risk exposing private data such as home addresses, social media logins, and credit card details.

Petrusic recommends using mobile data where possible or employing a VPN when using public wi-fi. “These precautions will help protect you from cyber criminals looking to exploit unsecured networks,” she added.

2. Fake Ticket Inspectors

Scammers impersonating train staff may approach passengers, claiming their ticket is invalid and demanding an on-the-spot fine. These fraudsters aim to pressure unsuspecting travellers into handing over cash or card details.

Petrusic advises passengers to always check the credentials of train staff. “Real ticket inspectors will wear official uniforms and badges, and it’s perfectly acceptable to ask to see their ID if you’re unsure,” she said.

3. Taxi Scammers

Unscrupulous taxi drivers in cities like London can take advantage of unfamiliar travellers by inflating fares or taking longer routes. Some may claim their meter is broken or operate unlicensed taxis, which could leave passengers at risk.

To avoid being scammed, Petrusic suggests only using licensed taxis or ride-sharing apps such as Uber, which provide pre-determined fares. “If the cab doesn’t have a working meter or you’re unsure if it’s legitimate, it’s best to look for another vehicle,” she added.

4. Fraudulent Booking Websites

Fraudsters often set up fake websites that mimic legitimate travel booking platforms. These sites can trick travellers into booking non-existent hotels, flights, or train tickets.

Petrusic recommends always booking directly through trusted operators or using reputable websites like Trainline and Booking.com. “Be cautious of deals that seem too good to be true and double-check the website’s authenticity before entering payment details,” she advised.

5. Card Skimming

Skimming devices can be attached to train ticket machines to steal credit card information when passengers swipe their cards. These devices are designed to be discreet but may leave machines looking slightly altered or damaged.

Petrusic advises passengers to be on the lookout for any unusual signs on ticket machines, such as loose parts. To stay safe, she recommends using contactless payments via mobile apps to avoid physical ticket machines altogether.