The Transport for London cyber incident is still ongoing.
The attackers onto the corporate network, which is currently contained.
The operational (ICS) network wasn’t reached so services to customers continue uninterrupted.
Boundary internet services often offline, VPN restricted to home users, ERP systems, API systems etc offline.