Back Securityaffairs.Co

Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack

Securityaffairs.Co •Pierluigi Paganini • July 16, 2026

Two members of the Scattered Spider cybercrime group received jail sentences in the UK for the 2024 cyberattack on Transport for London. A UK court sentenced two Scattered Spider members, Thalha Jubair (20) and Owen Flowers (18), for their role in the 2024 cyberattack on Transport for London (TfL). Transport for London (TfL) is a local […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Teenagers Plead Guilty to £39M Cyber Attack on Transport for London Thalha Jubair, 20, and Owen Flowers, 18, have pleaded guilty to a cyber attack on Transport for London (TfL) that occurred between August 29 and September 6, 2024. The attack, attributed to the Scattered Spider hacking group, caused an estimated £39 million in damages and disrupted services for approximately 10 million customers. Key features of the TfL Go app and website were compromised, preventing users from accessing live Tube information and making payments. The attack forced all 28,000 TfL employees to reset their passwords and impacted customer refund systems. Flowers also admitted to hacking two US healthcare companies. Both individuals are set to be sentenced on July 15, 2026. 119 sources 66

Extracted Entities

Companies (1)

Transport For London