Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack
Two leading members of the Scattered Spider cybercrime collective have been sentenced to more than five years in prison for carrying out the 2024 cyberattack against Transport for London (TfL).
Two leading members of the Scattered Spider cybercrime collective have been sentenced to more than five years in prison for carrying out the 2024 cyberattack against Transport for London (TfL), concluding what British authorities described as the largest cybercrime prosecution ever brought before a U.K. court.
Thalha Jubair, 20, of East London, and Owen Flowers, 18, from Walsall in England’s West Midlands, were each sentenced to five years and six months‘ imprisonment at Woolwich Crown Court on Thursday after pleading guilty last month to offenses under Section 3ZA of the Computer Misuse Act.
The pair admitted on the first day of trial in June to infiltrating TfL’s network in an attack that disrupted public services, exposed customer data and ultimately cost the transport authority £29 million ($39 million) in recovery expenses.
Source: https://therecord.media/scattered-spider-hackers-tfl-sentenced
Related breach coverage
- Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack2026-07-16
Two members of the Scattered Spider cybercrime group received jail sentences in the UK for the 2024 cyberattack on Transport for London. A UK court sentenced two Scattered Spider members, Thalha Jubair (20) and Owen Flowers (18), for their role in the 2024 cyberattack on Transport for London (TfL). Transport for London (TfL) is a local […]
- Two Scattered Spider Hackers Sentenced to Jail in UK2026-07-16
Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL). The post Two Scattered Spider Hackers Sentenced to Jail in UK appeared first on SecurityWeek.
- Dutch Nationals Suspected in Odido Hack That Exposed Six Million Customers2026-07-13
Dutch police suspect local hackers behind the Odido breach that exposed 6M customers after a phishing attack and seek public help identifying them. Dutch police have identified strong indications that Dutch nationals were involved in the February 2026 cyberattack on telecom provider Odido, which resulted in data from more than six million customers being stolen […]
- More than 1,000 domains illegally streaming World Cup games seized, DOJ says2026-07-20
Over the course of the World Cup tournament, the Department of Justice seized more than 1,000 domains for illegally streaming games.