Security

NS trains halted for hours after IT system ‘failure’

On Sunday, April 3rd, the principal Dutch passenger railway operator Nederlandse Spoorwegen (NS) suspended trains for hours reporting the failure of IT systems, as a reason.

The reported IT failure occurred later on Sunday morning impacting the scheduling systems that provide timetables for trains and staff.

“This system is important for safe and scheduled operations: if there is an incident somewhere, the system adjusts itself accordingly. This was not possible due to the failure,” explains NS.

International trains were not impacted by the IT incident.

A cyberattack or system error?

Without commenting on whether this ‘failure’ resulted from a cyberattack, NS said in a statement:

“Although the cause of the failure has now been resolved, the impact is considerable. To be able to start up reliably, systems must be updated and trains must be brought to the right place. That takes time. For our passengers, this is extremely unpleasant news. The expectation is that tomorrow morning the normal timetable can largely be resumed. The night trains can still run.”

In subsequent tweets, the train operator confirms that trains most journeys now resumed normally and advises passengers to keep an eye on its website and app for timetables:

Threat actors and ransomware groups targeting public transport systems has become a common occurrence.

In late 2020, Metro Vancouver’s transit network, TransLink was hit by Egregor ransomware, disrupting passenger services and payments.

Last year, Liverpool’s rail network Merseyrail was hit with a cyberattack, reportedly from the Lockbit ransomware.

Security Report has reached out to NS trains to find out more.

Update April 4th, 08:49 AM BST: Added tweets from NS with updated information.

Ax Sharma

Ax Sharma is a UK-based security researcher, journalist and TV subject matter expert experienced in malware analysis and cybercrime investigations. His areas of interest include open source software security and threat intel analysis. Frequently featured by leading media outlets like the BBC, Channel 5, Fortune, WIRED, The Register, among others, Ax is an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).

Recent Posts

ParkMobile’s $32.8 Million Data Breach Settlement = You get $1?

In 2021, parking app ParkMobile suffered a massive data breach impacting 22 million users whose…

4 days ago

8 Brutal Truths About Cybersecurity I Wish I Knew

When I first got into cybersecurity, I thought it was all about hackers in hoodies…

5 days ago

US Air Force Probes Potential SharePoint-Linked Privacy Breach

The US Air Force is investigating a “privacy-related issue” that may have exposed personally identifiable…

6 days ago

Harrods third-party breach exposes 430,000 customer records, hackers reach out

London’s iconic department store Harrods has disclosed that approximately 430,000 customer records were compromised in…

1 week ago

WestJet confirms customer ID, passports stolen in June cyberattack

WestJet confirmed that in a June 2025 cybersecurity incident, a “sophisticated, criminal third party” gained…

1 week ago

Did You Also Get a ‘Real’ Phishing Email From GitHub.com?

Imagine getting an email straight from GitHub’s own notification system: the same one you've trusted…

2 weeks ago

This website uses cookies.