LNER Data Information Update

We have been directly contacting customers who have been affected by this incident. We want to reassure everyone that we continue to treat this matter with the highest priority.

Once made aware by our third-party supplier, we immediately notified the relevant organisations and ensured widespread media coverage to alert our customers. A period of time has been needed to carry out a thorough investigation and to establish all the facts.

We are continuing to work closely with our supplier, who has engaged independent security experts, to put enhanced security controls in place to minimise the risk of this happening again.

Importantly, no bank, payment card, or password information has been affected. As a precaution, some customer communications have been temporarily paused. LNER advises customers to remain vigilant and be cautious of unsolicited emails, especially those requesting personal information.

If customers have any questions or would like further information, they can contact datainfo@lner.co.uk. 

You can find our initial media statement from Wednesday 10 September 2025 here.

Issued on Thursday 16 October 2025.