Teenagers Plead Guilty to £39M Cyber Attack on Transport for London

Thalha Jubair, 20, and Owen Flowers, 18, have pleaded guilty to a cyber attack on Transport for London (TfL) that occurred between August 29 and September 6, 2024. The attack, attributed to the Scattered Spider hacking group, caused an estimated £39 million in damages and disrupted services for approximately 10 million customers. Key features of the TfL Go app and website were compromised, preventing users from accessing live Tube information and making payments. The attack forced all 28,000 TfL employees to reset their passwords and impacted customer refund systems. Flowers also admitted to hacking two US healthcare companies. Both individuals are set to be sentenced on July 15, 2026.

Key Points: • Jubair and Flowers admitted to a £39 million cyber attack on TfL, affecting 10 million customers. • The attack disrupted key services, including live Tube information and payment systems. • Both hackers are linked to the Scattered Spider group and face sentencing on July 15, 2026.