While the NSW TrainLink database does not contain sufficient credit card data for it to be used in any transactions, they are still investigating the extent of customer information that has been accessed.

Police and Transport for NSW has engaged AusCERT, an Australian cyber emergency response company, to investigate the matter further. They have also notified the Information and Privacy Commissioner.

TrainLink is a regional transport network that services country NSW and interstate destinations.