Two leading members of the Scattered Spider cybercrime collective have been sentenced to five years and six months in prison for hacking Transport for London in 2024. Owen Flowers, 18, and Thalha Jubair, 20, pleaded guilty on the first day of what was expected to be a six-week trial at Woolwich Crown Court.
The attack, which targeted London public transport network, left 148 TfL systems inoperable and forced all 27,000 of the transport authority employees into an office to get their passwords reset in person. The National Crime Agency and Crown Prosecution Service estimated TfL total losses and recovery costs at approximately 29 million pounds.
The two men were described by prosecutors as key members of Scattered Spider, a prolific cybercrime group known for sophisticated social engineering attacks and data breaches targeting major corporations. The group has been linked to numerous high-profile cyberattacks against technology companies, financial institutions, and critical infrastructure providers.
The sentencing represents one of the most significant cybercrime convictions in UK history, according to law enforcement officials. The investigation involved collaboration between UK authorities, the FBI, and other international partners, highlighting the cross-border nature of modern cybercrime investigations.
The case also demonstrates the increasing willingness of courts to impose substantial sentences for cybercrime offenses. Both defendants were sentenced to five and a half years in prison, reflecting the serious impact of their actions on public infrastructure and the costs incurred by TfL in responding to and recovering from the attack.
This article was adapted from Bleeping Computer. Read the original here.
