Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Two individuals, Owen Flowers and Thalha Jubair, have been sentenced to 5.5 years in prison for their role in a 2024 hack of Transport for London. The hack resulted in 148 systems being left inoperable, requiring all 27,000 employees to reset their passwords in person. The attack is estimated to have cost TfL around £29 million. The sentences were handed down at Woolwich Crown Court. The National Crime Agency and the Crown Prosecution Service were involved in the case, calculating the losses and recovery costs for TfL. The defendants, aged 18 and 20, were found guilty and sentenced on July 16, 2026.