# Scattered Spider Hackers Sentenced for Disruptive TfL Cyber Attack

*Published July 20, 2026*
*Source: [https://cybersecuritynews.com/two-scattered-spider-hackers-jailed/](https://cybersecuritynews.com/two-scattered-spider-hackers-jailed/)*

## Executive Summary

Two young hackers from the Scattered Spider group have been sentenced for a cyber attack on Transport for London that disrupted services and caused significant financial losses. The attack led to widespread system impacts and necessitated password resets for 27,000 staff.

## Article

Two young hackers from the Scattered Spider cybercrime group have been sentenced for orchestrating a cyber attack on Transport for London (TfL) that caused extensive disruptions and financial damage. Thalha Jubair, 20, of East London, and Owen Flowers, 18, from Walsall, admitted to the 2024 breach that affected 148 TfL systems. On July 16, 2026, Woolwich Crown Court sentenced them to five years and six months in prison. The attack forced all 27,000 TfL staff to reset their passwords in person and caused an estimated £29 million in damages.

Between August 31 and September 3, 2024, Jubair and Flowers infiltrated TfL's network, leading to significant service disruptions. Although quick action contained some of the fallout, public-facing services such as Dial-a-Ride, concessionary travel cards, digital payments, and Oyster applications were impacted. This breach also delayed the expansion of contactless ticketing and caused delays in Oyster refund processing. Following the incident, TfL reported the breach to the City of London Police’s Report Fraud service.

The National Crime Agency and City of London Police identified Jubair and Flowers as leading members of the Scattered Spider group, known for employing tactics like social engineering and SIM-swapping. They were apprehended on September 16, 2024, and evidence including laptops and storage devices was seized from Flowers. The devices contained a screenshot of TfL's infrastructure and videos of the attack. Flowers was also implicated in hacking US healthcare firms, leading to further legal issues.

Microsoft noted that these arrests significantly impaired the operations of the Scattered Spider group, though the risk of their tactics being used by others remains. This case has been described as the largest cybercrime prosecution presented in UK courts. Authorities, including the NCA and City of London Police, emphasized the importance of early engagement with law enforcement to mitigate cyber threats. Additionally, proposals for Cyber Crime Risk Orders aim to restrict high-risk offenders from accessing technology. Security officials continue to advocate for enhanced cyber resilience to protect critical services from similar threats in the future.