Teen hackers jailed after live streaming cyber-attack on TfL

Two young men have been sentenced to over five years in prison for their role in a major cyber-attack against Transport for London. The pair, linked to the Scattered Spider hacking collective, stole personal data from millions of customers and disrupted services for months.
Why it matters
This case highlights the growing threat posed by young, organized cyber-criminal groups and the severe real-world consequences of large-scale data breaches.
Figure caption, Watch: The moments the men are arrested for their role in the cyber-attack
Two men who carried out a cyber-attack which crippled Transport For London (TfL) when they were teenagers have both been sentenced to five years and six months in prison.
Owen Flowers, 18, from Walsall, and Thalha Jubair, 20, from east London, pleaded guilty in June to carrying out the hack in 2024.
They were described as computer-obsessed loners who carried out the hack as part of the cyber crime collective known as Scattered Spider.
The cyber-attack disrupted TfL's online services for months, stole the personal data of millions of people and left all 27,000 TfL employees needing to reset their passwords in person.
Woolwich Crown Court heard the criminals streamed their 16 hour long cyber-attack online.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in