Almost two years after a cyberattack disrupted Transport for London’s (TfL) on-line companies and uncovered buyer knowledge, two members of the Scattered Spider cybercrime group have been sentenced to jail.
Thalha Jubair, 20, and Owen Flowers, 18, every obtained a jail sentence of 5 years and 6 months at Woolwich Crown Court docket, bringing one of many UK’s highest-profile cybercrime prosecutions to a detailed.
The sentencing follows an investigation that started after attackers gained entry to TfL’s community between 31 August and three September 2024. Though trains and buses continued working, the breach disrupted a number of buyer companies, together with Oyster refunds, Dial a Journey, and on-line account capabilities.
Reportedly, TfL was additionally pressured to require roughly 28,000 staff to reset their passwords in particular person, whereas restoration prices and misplaced revenue reached about £39 million.
The case moved rapidly as soon as investigators recognized the suspects. Flowers was arrested in Walsall and Jubair in East London in September 2025, earlier than each have been charged with offenses linked to the TfL assault.
They initially denied the allegations however modified their pleas to responsible when their trial opened in June 2026. Flowers additionally admitted hacking two US healthcare organizations, SSM Well being and Sutter Well being.
Investigators stated the pair have been members of the loosely organized Scattered Spider group, which has been linked to high-profile assaults towards telecommunications firms, retailers, casinos, and cloud service suppliers.
Proof recovered through the investigation included recordings, screenshots, Telegram conversations, and cryptocurrency linked to the defendants. Prosecutors stated the attackers even livestreamed components of the TfL compromise and searched buyer information after getting access to inner programs.
The Nationwide Crime Company described the prosecution because the UK’s greatest cybercrime case to achieve the courts. Deputy Director Paul Foster of the NCA’s Nationwide Cyber Crime Unit stated the investigation demonstrated the worth of shut cooperation between investigators and TfL, including that cybercrime produces real-world penalties for organizations and the general public.
The case has additionally obtained worldwide consideration. Following the sentencing, the FBI’s Cyber Division publicly congratulated the NCA, Metropolis of London Police, the Crown Prosecution Service, and TfL for securing the convictions. The company stated the result mirrored the worth of worldwide legislation enforcement cooperation towards cybercrime teams corresponding to Scattered Spider.
With the sentencing now full, the case closes a sequence that started with the arrests, continued by means of formal costs and responsible pleas, and ended with jail phrases for each defendants.
Authorities proceed to research cybercrime teams linked to Scattered Spider, whose members stay related to a number of main intrusions affecting organizations within the UK and overseas.
Youngsters and On-line Crime
This case highlights the constant, disturbing rise within the youth’s involvement in such crimes, as they don’t perceive the authorized risks of cyberattacks. NCA earlier reported that one in 5 UK youngsters between 10 and 16 have damaged the legislation on-line and engaged in hacking.
“A current survey of youngsters aged 10-16 confirmed that 20% have interaction in behaviours that violate the Laptop Misuse Act, which criminalises unauthorised entry to laptop programs and knowledge. The determine is increased for individuals who recreation, standing at 25%,” the NCA reported in 2024.
