CYJAX GETS RAIL. A review of cyber and physical threats to the global rail sector

Rail doesn't get to switch off. Signalling systems can't take a maintenance window whenever it's convenient, and stations stay open to millions of people who never think twice about the infrastructure keeping them moving. That constant, public-facing operation makes rail a distinctive target for cybercriminals working through suppliers, fraudsters running ticket scams, and activists seeking maximum disruption for minimal effort.

This briefing brings together the cyber, data and physical threats currently facing rail operators, manufacturers and their supply chains, illustrated with real incidents from the UK and Europe. Every incident referenced is real and sourced, and every section closes with what it means for your organisation specifically.

Get the report built for rail sector CISOs, security leads and risk owners who need a current picture of what's actually happening across UK and European rail, not a theoretical list of what might happen somewhere, someday.

Inside the report:

• How 130+ initial access broker listings for transport since 2023 are turning third-party access into ransomware and espionage risk
• Why a £5m+ cable theft bill in UK rail during 2025 alone is being treated by Spanish authorities as sabotage, not scrap crime
• The 308,777 individuals affected by the Eurail breach, and how stolen rail data stays in circulation long after disclosure
• How a 23-year-old radio hobbyist brought four Taiwan High-Speed Rail trains to an emergency stop by exploiting 19 years of unrotated TETRA parameters
• Why 800,000 passengers were disrupted by coordinated arson on French rail infrastructure on the eve of the Paris Olympics
• The diverging UK and European approaches to rail activism, and where the two are likely to converge

Download the Report →