UK court jails young hackers for massive London transport cyberattack

Two young men, Thalha Jubair, 20, and Owen Flowers, 18, have been sentenced to five-and-a-half years in prison each by a UK court for a cyberattack on Transport for London (TfL). The attack, which occurred between August 31 and September 3, 2024, resulted in a significant data breach, exposing the names and contact details of approximately 7 million customers. Both individuals pleaded guilty to hacking TfL's network. The incident is considered one of Britain's largest data breaches.

Teenage hackers Thalha Jubair, 20, and Owen Flowers, 19, have been sentenced to five and a half years each for a cyber-attack on Transport for London (TfL) in August 2024. The attack, which lasted four days, compromised TfL's IT systems, leading to the theft of millions of commuters' data, financial losses for Londoners, and forced password resets for 27,000 staff. While the main transport networks were not directly impacted, the dial-a-ride service for disabled passengers experienced booking disruptions. The hackers gained "keys to the kingdom" access, allowing them to potentially shut down TfL completely. They were part of the hacker collective Scattered Spider and had amassed millions in cryptocurrency. The National Crime Agency stated their conviction has effectively halted the group's criminal activity.