So it seems TfL was either made aware of or spotted 1200 or so suspicious logins last night? I may be missing something here but I don’t see the logic of this? Why TfL? What was there to gain?
I can only imagine someone adding Oyster cards on mass to top-up but even then the website requires each saved credit or debit cards CVC everytime?