The company that runs Luas says no financial information has been compromised after its website was hacked.
Transdev has taken its site offline, after a message appeared on its homepage this morning demanding one Bitcoin - which is worth around €3000.
The company says just over three thousand people who signed up to the Luas newsletter may have had their records compromised.
"Luas will write to these people within the next 24 hours informing them of the potential breach", a statement said.
Following criticism that the site was not secure enough, Transdev has confirmed it does have a valid SSL digital security certificate.
The company has admitted there "is no estimation as to the full damage done to the site", and technicians are working on a temporary site which customers can use until the main one is operational again.
"We would like to apologise for any inconvenience caused to our customers as a result of this Cyber-attack", the statement said.