TfL is asking all Oyster and contactless account holders to reset their passwords to reduce the risk of credential stuffing attacks.