Source: the 2024 cyber-attack by the Scattered Spider group on Transport For London resulted in the theft of personal data of ~10M people BBC 2026-03-07 Scattered Spider