Two members of the Scattered Spider hacking group received five-and-a-half-year sentences for orchestrating a 2024 cyberattack on Transport for London that caused £29 million in damages. Owen Flowers, 18, and Thalha Jubair, 20, were convicted at Woolwich Crown Court on July 16, 2026.

The attack disabled 148 TfL systems and created severe operational disruption. The transport authority forced all 27,000 employees to attend in-person password reset sessions, a costly and logistically complex response that underscored the attack's reach. The National Crime Agency and Crown Prosecution Service quantified TfL's losses and recovery costs at £29 million.

Scattered Spider operates as a financially motivated threat group specializing in social engineering and credential theft. The group targets high-value organizations across multiple sectors, leveraging phishing, pretexting, and insider manipulation to gain initial access. Their attacks prioritize financial extraction and operational disruption rather than data exfiltration alone.

This case marks a significant win for UK law enforcement in prosecuting Scattered Spider operators domestically. The sentences reflect the severity of the attack and its cascading impact on critical infrastructure. TfL's scale—as one of Europe's largest transport networks serving millions daily—elevated the attack's public impact and likely influenced sentencing severity.

The conviction demonstrates that even young threat actors face substantial prison time for attacks on critical infrastructure. The National Crime Agency's involvement signals elevated focus on organized cybercriminal groups operating against UK essential services. Scattered Spider's operational footprint spans North America and Europe, making international coordination necessary for effective disruption.

Organizations remain vulnerable to Scattered Spider's social engineering tactics. The group's success hinges on human factors rather than zero-day exploits, making awareness training and credential security the primary defensive vectors