Reported by 2 outlets
Scattered Spider Members Plead Guilty Over £39M Transport for London Cyber Attack
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Scattered Spider Members Plead Guilty Over £39M Transport for London Cyber Attack
databreaches.net · 113d ago · June 23rd, 2026
Two individuals believed to be members of the Scattered Spider cybercrime group changed their pleas to guilty just before trial, in connection with the September 2024 cyberattack against Transport for London (TfL) that caused months of operational disruption and cost £39 million.
The arrests date from 2024 and 2025. This marks one of the first significant legal outcomes against the loosely organized English-speaking cybercrime collective known for SIM-swapping, social engineering of help desks, and ransomware affiliate work.
-
update from bleepingcomputer.com
Scattered Spider Members Sentenced to 5.5 Years for Transport for London Attack
bleepingcomputer.com · 89d ago · July 17th, 2026
Two leading members of the Scattered Spider cybercrime collective — Thalha Jubair (20) and Owen Flowers (18) — were sentenced to five years and six months in prison each for hacking Transport for London (TfL) in August 2024. The attack disrupted internal systems and online services affecting 8.4 million Londoners, including Dial-a-Ride, concessionary travel cards, digital payments, and contactless ticketing. 148 systems became inoperable and all 27,000 TfL employees had to reset passwords in person. TfL reported £29 million in losses; officials estimated the UK economy could have lost up to £56 billion had the transport network been fully shut down. At the time of arrest, Flowers' devices contained evidence of ongoing intrusion attempts against U.S. healthcare companies Sutter Health and SSM Health Care Corporation. DOJ has also charged Jubair for conspiracy relating to at least 120 network breaches with over $115 million extorted globally. NCA Deputy Director Paul Foster described Scattered Spider as "the most significant cybercrime threat to the UK in recent years."