TfL insists it has "kept customers informed throughout this incident and will continue to take all necessary action".
A hacker has sent the BBC a copy of a Transport for London (TfL) database containing the personal details of around 10 million people, allowing the broadcaster to verify the scale of the breach.