Transport for London now says that it has "identified that certain customer data has been accessed."
"This includes some customer names and contact details, including email addresses and home addresses where provided," said TfL on its update page.
TfL now says the data may include "bank account numbers and sort codes" for around 5,000 Oyster card customers.
I first reported two days ago that customer data was affected. A TfL spokesperson wouldn't comment. https://techcrunch.com/2024/09/10/londons-transit-agency-drops-claim-it-has-no-evidence-of-customer-data-theft-after-hack/