UK Teen Hackers Jailed for TfL Cyberattack
Two young members of the Scattered Spider group received 5.5-year sentences for disrupting Transport for London services. The breach impacted thousands of employees and cost millions in recovery.
TL;DR
- Owen Flowers (18) and Thalha Jubair (20) sentenced to 5.5 years each
- Attack disabled 148 TfL systems, forcing manual password resets for 27,000 staff
- Hack attributed to Scattered Spider, a known cybercriminal group
- Estimated financial impact: £29 million
- Case highlights risks of insider-like access and social engineering
In July 2026, two young hackers linked to the Scattered Spider cybercrime group were sentenced to five and a half years in prison for their role in a significant 2024 cyberattack on Transport for London (TfL). The breach caused widespread disruption across TfL’s digital infrastructure, leaving critical systems inoperable and forcing an unprecedented manual response.
The attack, which targeted internal systems used by TfL employees, highlighted serious gaps in organizational resilience and access control. With 148 systems affected and nearly 27,000 staff required to reset passwords in person, the incident not only disrupted daily operations but also incurred substantial recovery costs estimated at £29 million.
Impact and Response
- 148 TfL systems were rendered inoperable during the attack
- All 27,000 TfL employees had to physically report to offices to reset passwords
- Estimated financial damage and recovery costs reached £29 million
- The National Crime Agency (NCA) and Crown Prosecution Service (CPS) collaborated on the investigation
Perpetrators and Group Affiliation
- Owen Flowers, 18, and Thalha Jubair, 20, both admitted to involvement in the hack
- They were identified as members of the Scattered Spider hacking collective
- Scattered Spider is known for financially motivated attacks using social engineering
- Both defendants received identical sentencing at Woolwich Crown Court in July 2026
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.