Two Hackers Jailed for Massive Cyberattack on London Transport

Two young hackers have been sentenced to five and a half years in prison each for a 2024 cyberattack on Transport for London that caused £29 million in damages.

The Sentence

A London court has handed down prison sentences to two hackers responsible for a 2024 cyberattack on London’s public transport system. The damage caused by the perpetrators is estimated at £29 million.

Thalha Jubair and Owen Flowers, aged 20 and 18 respectively, previously pleaded guilty. Judge Mark Turner stated that despite their youth, the severity of the crime necessitated imprisonment.

Scope of the Cyberattack

In late August 2024, Jubair and Flowers breached the internal systems of Transport for London. They stole data from millions of passengers and forced all staff to reset their login credentials.

The company experienced the consequences of the attack for six months, noting that the damages could have been significantly worse without the intervention of its IT specialists.

The Scattered Spider Network

The perpetrators were part of a loose hacker collective known as Scattered Spider. Paul Foster, Deputy Director of the National Crime Agency, stated that the ruling serves as a warning regarding the dangers posed by self-taught young hackers.

Foster emphasized that parents, educators, technology companies, and law enforcement all share a responsibility in ensuring the safety of young people online.