The Wi-Fi service, which operated on a "click-and-connect" basis and did not collect personal information, was managed by the third-party firm Telent, according to a statement from Network Rail. On Thursday, Telent identified Global Reach, the provider responsible for the service's landing page, as the source of the disruption caused by an act of cyber vandalism. They clarified that this incident did not stem from any weaknesses in network security or technical failures.

Telent announced its goal to reinstate public Wi-Fi access by the weekend while coordinating with law enforcement agencies. The British Transport Police have classified the situation as a criminal investigation, with Telent confirming that no personal information was compromised during this event. Nevertheless, as a precautionary measure, the company has temporarily halted the use of services from Global Reach to ensure that their other clients were not affected.

In response to inquiries, a Global Reach representative acknowledged the cyber vandalism that impacted a limited number of their customers' captive portals and indicated that they had swiftly implemented measures to mitigate risk. The representative also mentioned that Global Reach is working alongside authorities on the ongoing investigation but was unable to share additional information at this time. Moreover, Britain's crime and cybersecurity agencies are assisting the Transport Police in this investigation.