Cyber incident transport & operational disruption - UK Public Transport Authority

A major UK public transport authority engaged Ashurst following a cyber attack that disrupted operations and raised immediate regulatory, customer and workforce considerations. The client required urgent legal and strategic support to manage the incident response, regulatory engagement and sensitive internal decision-making under intense public scrutiny.

Our solution

Ashurst guided the client through an integrated legal and operational response. We advised on engagement and communications with the Information Commissioner’s Office and other relevant authorities, supported the development of clear and compliant messaging for affected customers, and applied strategic use of legal privilege to protect sensitive internal discussions. We also advised on witness protection and evidence-handling to ensure leadership and key personnel could act decisively while managing personal and organisational risk.

Client outcome

The client was able to respond swiftly and confidently to the incident, engage constructively with regulators, protect critical internal processes and support leadership decision‑making during a highly pressurised and public cyber event.