Two men linked to the Scattered Spider hacking group plead guilty to offences connected to a 2024 cyberattack on Transport for London (TfL). According to reports, Thalha Jubair, 20, from London, and Owen Flowers, 18, from Walsall, entered guilty pleas at a court hearing in London under the UK’s Computer Misuse Act. The attack targeted TfL’s network in late August and early September 2024, with sources citing dates ranging from 29 August to as late as 6 September. The incident disrupted services and affected large numbers of passengers, including Oyster card users, with some reports describing the attack as having a significant impact across TfL’s systems.
Financial figures cited by outlets differ, with some reporting total costs at about £39 million and others referring to £29 million in loss and recovery costs, depending on how costs are calculated. The court process is expected to continue, with sentencing scheduled for 16 July, and details of the broader investigation are not fully described in the accounts provided. None of the sources indicate that TfL’s wider response or remedial actions were part of the guilty pleas.
