A UK-based rail network Merseyrail has confirmed a cyberattack after the LockBit ransomware gang used their email system to email employees and journalists about the attack.