Two Britons Plead Guilty in £39 Million TfL Cyberattack

Thalha Jubair, 20, and Owen Flowers, 18, have pleaded guilty to charges related to a cyberattack on Transport for London (TfL) that occurred between August 29 and September 6, 2024. The attack, linked to the Scattered Spider hacking group, compromised the personal data of approximately 10 million customers and caused a financial loss of £39 million. The breach disrupted TfL's online services for three months, affecting payment processing and customer information access. Both men changed their pleas on the first day of their trial at Woolwich Crown Court. Flowers also admitted to attempting to hack two US healthcare organizations. They will be sentenced on July 15, 2026. The attack has been characterized as one of the largest data breaches in the UK.

Key Points: • Two men pleaded guilty to a £39 million cyberattack on Transport for London. • The attack affected approximately 10 million customers and caused significant service disruptions. • Both defendants are linked to the Scattered Spider hacking group and face additional charges related to US healthcare systems.