Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London

Thalha Jubair and Owen Flowers pleaded guilty to a cyber-attack on Transport for London (TfL) on September 2, 2024. The attack, attributed to the Scattered Spider hacking group, resulted in an estimated £39 million in costs and impacted approximately 10 million individuals. Jubair, aged 20, and Flowers, aged 18, entered their guilty pleas to offenses under the Computer Misuse Act at Woolwich crown court. The cyber incident disrupted TfL's services and operations, necessitating significant resources for recovery and remediation. The guilty pleas mark a significant development in the legal proceedings against the individuals involved in the large-scale digital intrusion. The investigation into the attack involved collaboration between various law enforcement agencies to identify and apprehend those responsible for the breach. The financial and operational impact on TfL highlights the growing threat of sophisticated cyber threats to public infrastructure and services.