[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-639506-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-639506-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","customer-success-the-go-ahead-group-fights-off-cyber-attack","Customer Success - The Go-Ahead Group Fights Off Cyber Attack","","Customer success story about The Go-Ahead Group plc addressing a UK bus and train network slowdown caused by a cyber attack. After Symantec identified the situation, Threatscape deployed an engineer on site, detected the Conficker worm, and contained a system-wide threat within 24 hours. The engagement also enabled central remote management with daily scans, expanded device visibility to tens of thousands of previously undocumented endpoints across 340 locations, and delivered an estimated 10% cost reduction in 36 months through centralized governance and operational simplification.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/customer-success-the-go-ahead-group-fights-off-cyber-attack/639506/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/customer-success-the-go-ahead-group-fights-off-cyber-attack/639506.png","ImageObject",300,407,{"name":42,"@type":43},"Mimi","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-02","2026-10-22",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",5,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What cyber issue affected The Go-Ahead Group’s bus and train network?","Question",{"text":63,"@type":64},"The network slowed down due to relentless attacks from the Conficker worm, a type of malicious code spreading across the network.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How quickly was the Conficker worm contained?",{"text":68,"@type":64},"The worm was identified and contained on thousands of devices within 24 hours, according to the results described.",{"name":70,"@type":61,"acceptedAnswer":71},"What did the solution add beyond stopping the infection?",{"text":72,"@type":64},"It introduced centralized remote management with daily automated scans and deeper inventory to identify previously undocumented and unprotected devices across many locations.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},639506,1792703931,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,100,105,110,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":112,"slug":113},8,30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":55,"slug":129},19,"General","general",{"code":4,"msg":82,"data":131},{"doc_id":79,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":111,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":30,"language":139,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":12,"update_tm":80,"read_time":111},2336477974920,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","CUSTOMER SUCCESS  \nThe Go-Ahead Group plc.  \nThe Go-Ahead Group Fights Off Cyber Attack and Supports a Billion  \nPassenger Journeys a Year with Solutions from Symantec and Threatscape  \nWhen a network critical to bus and train service in the UK began to slow down, the IT team at The Go-Ahead Group plc. suspected a cyber attack, and turned to Symantec and Symantec Platinum Partner Threatscape. Results include a malicious worm identified and contained on thousands of devices within 24 hours, a new central remote management capability that conducts daily scans to identify new and unprotected devices, and an estimated 10 percent cost reduction in 36 months.  \nRising risk for transport titan  \nSomething was wrong. The network was slowing to a crawl, and much was at stake.  \nThousands of buses and trains were in the middle of routes that total 250,000 miles each day for The Go-Ahead Group plc, one of the UK’s biggest transport providers. Go-Ahead operates eight bus and three train companies throughout the central and southern UK, supporting a billion passenger journeys a year.  \nOn this day, however, computer services that support the routes were slowing down, and the risk of disruption was growing. Go-Ahead called Symantec, and on Symantec’s recommendation, they called Threatscape, a Symantec Platinum Partner and endpoint specialist. An executive at Go-Ahead wanted to know what was happening to the networks. There was an attack, he said, and why wasn’t Symantec Endpoint Protection software stopping it?  \nThreatscape immediately sent an engineer on site, and he detected that computers were under relentless attack by the Conficker worm, a form of malicious code that uses various encryption and stealth techniques to mask its spread across a network. First identified in 2008, Conficker has infected an estimated three million computers worldwide.“Network communication was getting saturated,” says Mick Legge, Head of Information Security for The Go-Ahead Group.  \nORGANIZATION PROFILE  \n[Site:](Site: www.go-ahead.com)[ www.go-ahead.com](Site: www.go-ahead.com)  \n[Industry:](Industry: Transport)[ Transport](Industry: Transport)  \nHeadquarters: London, UK  \nEmployees: 26,000  \nKEY CHALLENGES  \nThe Go-Ahead Group needed to identify and remove a cyber threat slowing a network that is critical to its bus and train companies.  \nSOLUTION  \nGo-Ahead turned to Symantec and Symantec Platinum Partner Threatscape for help with Symantec™ Endpoint Protection and Symantec™ Client Management Suite.  \nBENEFITS  \n• Elimination within 24 hours of system-wide worm threatening to disrupt critical network  \n• Identification and protection of thousands of previously undocumented devices in  \n340 locations from central console  \n• Daily automated scans identify new and unprotected devices  \n• Cost reduction with a wide range of business benefits such as centralization, consolidation, and simplification  \nCUSTOMER SUCCESS | The Go-Ahead Group plc.  \n“Threatscape helped us triage the problem, get the Conficker worm off infected systems, and protect each device with Symantec Endpoint Protection. Within two hours, we knew exactly what was going on, and within 24 hours, we basically put out all the fires.”  \nJohn Jordan  \nIT Infrastructure Manager The Go-Ahead Group plc.  \nAn unexpected source of trouble  \nThe engineer determined that the problem wasn’t Symantec Endpoint Protection, which was successfully defending every system it was installed on.“The problem was that the network contained many undocumented and unprotected systems,” Legge explains.“People had connected systems to the network and not told Go-Ahead about them, or they hadn’t been properly registered.”  \nThe unprotected systems didn’t seem like computers, Legge adds. They lacked keyboards, but had processors and Windows operating systems embedded, making them vulnerable.“They control digital displays, sell tickets, operate the ticket gates, and power the public address system,” says Legge.“The people t","cbCairxhnpzvgwMO","https://ap.wps.com/l/cbCairxhnpzvgwMO","pdf",1054067,"English","# Organization Profile\n# Key Challenges\n# Solution\n# Benefits\n# An Unexpected Source of Trouble\n# Two-Part Solution: Mend and Defend\n# Centralizing Control","[{\"question\":\"What cyber issue affected The Go-Ahead Group’s bus and train network?\",\"answer\":\"The network slowed down due to relentless attacks from the Conficker worm, a type of malicious code spreading across the network.\"},{\"question\":\"How quickly was the Conficker worm contained?\",\"answer\":\"The worm was identified and contained on thousands of devices within 24 hours, according to the results described.\"},{\"question\":\"What did the solution add beyond stopping the infection?\",\"answer\":\"It introduced centralized remote management with daily automated scans and deeper inventory to identify previously undocumented and unprotected devices across many locations.\"}]","Customer Success - The Go-Ahead Group Fights Off Cyber Attack | PDF"]