Two men plead guilty over £39m TfL cyber attack
The attack accessed Oyster refund data and forced 28,000 TfL staff to reset passwords, with losses reported at £39 million, prosecutors said.
- On Monday, Owen Flowers, 18, and Thalha Jubair, 20, pleaded guilty at Woolwich Crown Court to cyber attacks against Transport for London, admitting roles in the 2024 breach that caused £39 million in losses.
- Members of criminal collective Scattered Spider infiltrated TfL's network between August 29 and September 6, 2024, forcing 28,000 employees to perform password resets and compromising Oyster refund system data.
- Investigators discovered Telegram messages, shared workspaces, and videos of the attack on defendants' devices; Flowers and Jubair also admitted targeting US healthcare firms SSM Health Care Corporation and Sutter Health.
- Sentencing for the pair is scheduled for July 15 and 16; London's Transport Commissioner Andy Lord welcomed the outcome, emphasizing customer data security remains a top priority.
- Deputy Director Paul Foster of the National Crime Agency's National Cyber Crime Unit stated that while cybercrime may seem 'faceless,' the infiltration of TfL demonstrates it has significant real-world consequences for the public.
22 Articles
22 Articles
krebsonsecurity.com
Malware Analysis, News and IndicatorsScattered Spider Hackers Plead Guilty on Day 1 of Trial
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial. Owen Flowers (left) 18, and Thalha Jubai…
Hackers Plead Guilty in One of Britain's Largest Data Thefts: 10M TfL Passengers Still Exposed
Two teenagers have admitted to carrying out the cyber attack that shut down London's transport network for three days in 2024 and cost Transport for London £39M. But the 10 million passengers whose personal details now circulate among criminals are the ones still paying for it. Thalha Jubair, 20, from Bow in east London, and Owen Flowers, 18, from Walsall, pleaded guilty at Woolwich Crown Court on 22 June 2026 to conspiring to commit unauthorise…
Two Britons plead guilty to €45.2m cyber-attack in London: How the average person can stay safe
Two young Britons have pleaded guilty to a cyber-attack on Transport for London in 2024 that cost £39 million (more than €45.2 million) and affected 10 million people, judging by court proceedings carried out on Monday, June 22. The two men, Thalha Jubair and Owen Flowers, aged 20 and 18 respectively, were found to be from a hacking group called Scattered Spider, which itself is suspected of… Source
2 Hackers Plead Guilty to Scattered Spider Attacks in UK, US
Two hackers, teenagers at the time of their offense, pleaded guilty on June 22 to a series of cyberattacks on targets in the UK and the United States. Thalha Jubair, 20, from London, and Owen Flowers, 18, from Walsall, near Birmingham, pleaded guilty at Woolwich Crown Court in London on the first day of their trial for offenses under the UK’s Computer Misuse Act. The UK’s National Crime Agency (NCA) said the pair—who were members of an online cr…
Coverage Details
Bias Distribution
- 58% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
