Railway news

Train firm slammed for ‘cynical’ fake bonus email in cybersecurity exercise

Railway news

A trade union has slammed a train company’s “cynical and shocking stunt” after it promised employees a bonus in what was actually a cybersecurity test.

West Midlands Trains (WMT) emailed staff informing them they would receive a financial reward due to their “hard work” during the coronavirus pandemic.

Also see:

Recipients were invited to click on a link for “information of your one-off payment”.

Article continues below...

But the company sent a further email to those who opened the link, explaining that “this was a test designed by our IT team”.

The original message was designed to “closely mimic the tactics that, sadly, are being used on a daily basis by expert criminal organisations to try to gain access to company data”, the follow-up message stated.

The TSSA claimed the promise of a bonus was sent to 2,500 members of staff.

Article continues below...

‘Shocking stunt’

Manuel Cortes, the union’s general secretary, said: “This was a cynical and shocking stunt by West Midlands Trains, designed to trick employees who have been on the front line throughout this terrible pandemic, ensuring essential workers were able to travel.

“The company must now account for their totally crass and reprehensible behaviour.

“They could and should have used any other pretext to test their internet security.

Article continues below...

“It’s almost beyond belief that they chose to falsely offer a bonus to workers who have done so much in the fight against this virus.

“Our members have made real sacrifices these past 12 months and more.

“Some WMT staff have caught the disease at work, one has tragically died, and others have placed family members at great risk.

Article continues below...

“We need to know who sanctioned this email and we need an apology.

“Moreover, having fraudulently held out the prospect of a payment to staff, WMT must now be as good as their word and stump up a bonus to each and every worker.

“In that way the company can begin to right a wrong which has needlessly caused so much hurt.”

A spokesman for WMT, the parent company of West Midlands Railway and London Northwestern Railway, said: “We take cybersecurity very seriously, providing regular training on the subject and we run exercises to test our resilience.

“Fraud cost the transport industry billions of pounds every year.

“This important test was deliberately designed with the sort of language used by real cyber criminals but without the damaging consequences.”

Railway Reads

From the history of steam through to 21st century rail transport news, we have titles that cater for all rail enthusiasts. Covering diesels, modelling, steam and modern railways, check out our range of magazines and fantastic subscription offers.

Get The Railway Hub Weekly Round-up

Enter your e-mail address below and you will receive weekly rail news straight into your inbox...

You can unsubscribe at any time.

About the Author

Sam Hewitt