Thalha Jubair

Thalha Jubair, aged 20, has pleaded guilty to a significant cyber-attack on Transport for London (TfL) in 2024, alongside 18-year-old Owen Flowers. The pair, identified as part of the Scattered Spider hacking group, gained access to the core of TfL's IT systems, effectively holding the "keys to the kingdom." This breach compromised the data of millions of commuters, caused financial losses estimated at £39 million, and necessitated password resets for approximately 27,000 TfL staff. The attack left Londoners out of pocket and disrupted services. Jubair and Flowers entered their guilty pleas under the Computer Misuse Act at Woolwich Crown Court. The National Crime Agency (NCA) was involved in the investigation, highlighting the serious nature of their cybercriminal activities and their impact on critical infrastructure.