Merseyrail

Merseyrail is a train operating company that provides passenger rail services across the Liverpool City Region in the United Kingdom. It operates the Merseyrail network, which consists of two electrified lines that connect Liverpool city centre with surrounding suburbs and towns. The service is primarily focused on commuter and regional travel, offering frequent stops at stations throughout Merseyside. Merseyrail’s role is to move people efficiently within the metropolitan area, supporting both daily work journeys and leisure travel.

The network is notable for its high frequency of service, with trains running every few minutes during peak periods on the core sections of the lines. Merseyrail operates a fleet of modern electric multiple units that are specifically designed for the tight curves and short station spacing of its urban infrastructure. It holds a franchise or concession agreement that is overseen by the local transport authority, Merseytravel, which sets service standards and performance targets. The operator is recognised for its integration with other public transport modes, including bus and ferry connections, facilitating seamless travel for passengers.

Merseyrail services are delivered by Merseyrail Electrics 2002 Ltd, a joint venture between the transport companies Serco and Abellio. This joint venture holds the contract to operate the network on behalf of the public sector. Merseytravel, the passenger transport executive for the Liverpool City Region, retains ownership of the infrastructure and is responsible for setting fares and policy. The arrangement places operational responsibility with the private partners while strategic oversight remains with the public body.

In April 2021, Merseyrail was targeted by the Lockbit ransomware gang, which compromised a director’s corporate email account and used it to spread claims of data theft. The attackers sent messages to employees and media outlets, alleging that employee and customer information had been exfiltrated and providing a sample of purportedly stolen data. Merseyrail confirmed the breach, launched an investigation, and notified the UK Information Commissioner’s Office as required by data protection regulations. The incident highlighted the growing trend of ransomware groups using communication channels to amplify extortion pressure beyond simple encryption.