Two British hackers who carried out a cyberattack on Transport for London (TfL) that cost the transport authority £29 million to remediate have been jailed for a total of 11 years.
Thalha Jubair, 20, and Owen Flowers, 18, were each sentenced to five and a half years in prison on Thursday after admitting their roles in the attack, which took place between 31 August and 3 September 2024.
The pair pleaded guilty last month, on what would have been the first day of their trial, to offences linked to the breach of TfL's computer systems. Flowers also admitted carrying out cyberattacks against two non-profit healthcare providers in the U.S. shortly after the TfL hack.
Sentencing the pair at Woolwich Crown Court, Judge Mark Turner said they had been "primarily motivated by selfish bravado, heedless of the severe consequences for others".
Prosecutors said the hackers gained the highest level of access within TfL's network, effectively obtaining what was described in court as "the keys to the kingdom".
At one stage, they had the ability to lock administrators out of the system and potentially shut down critical services entirely.
The cyberattack led to the theft of data belonging to millions of customers, forced 27,000 TfL employees to reset their passwords and disrupted services, including the Dial-a-Ride booking system used by disabled passengers.
Although London's Underground and bus services continued operating, TfL said the intrusion had the potential to cause catastrophic damage and prolonged disruption across the network.
Andy Lord, TfL's commissioner, described it as the most serious cyber incident he had encountered during his career.
Investigators said the hackers communicated throughout the operation using Telegram, while Flowers recorded a livestream that Jubair broadcast during the attack.
The pair were described as key figures within the loose English-speaking cybercrime network known as Scattered Spider, a group linked to a series of high-profile hacks in recent years.
Court documents showed the pair openly referred to the group during their communications.
Messages presented during the hearing included references to Scattered Spider, with one exchange appearing to joke about membership status and another boasting about the group's activities.
Authorities said the pair had accumulated significant wealth through cybercrime, including cryptocurrency holdings worth millions of dollars.
Owen Flowers
The case has highlighted the growing threat posed by young cybercriminals operating from their homes while targeting major organisations around the world.
Although the hackers led largely online lives, prosecutors said their actions had real-world consequences, affecting millions of commuters and imposing heavy costs on one of the world's largest public transport networks.
The sentencing brings to a close one of the most damaging cyberattacks ever suffered by TfL, but security experts say it also underscores the continuing challenge posed by loosely organised hacking groups such as Scattered Spider.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissio...
Secretary of State Marco Rubio told allied foreign ministers Washington will focus on sanctions and other pressure on Iran “for the time bein...
Kazakhstan is considering the Baku-Supsa pipeline as an alternative oil export route after Caspian Pipeline Consortium disruptions cost the country...
Oil prices fell after the U.S. expanded economic sanctions on Iran, as Tehran vowed to retaliate and warned it had tools to respond, raising concerns over potential disruption to regional oil supplies.
Kyiv has recently received a small number of U.S.-made Patriot interceptors capable of downing Russian ballistic missiles, Ukrainian President Volodymyr Zelenskyy has said. It comes as Britain and France pledged stronger military support for Ukraine.
Secretary of State Marco Rubio told allied foreign ministers Washington will focus on sanctions and other pressure on Iran “for the time being”, Axios reports. Meanwhile, Iran and Oman have resumed talks on a temporary shipping route through the Strait of Hormuz.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissioner, Yana Lantratova, has said.
At least nine people have been killed and hundreds of tourists are missing after a massive landslide triggered catastrophic flooding near Nepal’s Himalayan border with China’s Tibet region.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissioner, Yana Lantratova, has said.
Meta Platforms has agreed to pay up to $16.68 billion and make sweeping changes to Facebook and Instagram to settle claims that its platforms put children and teenagers at risk.
At least nine people have been killed and hundreds of tourists are missing after a massive landslide triggered catastrophic flooding near Nepal’s Himalayan border with China’s Tibet region.
Instagram Chief Adam Mosseri has acknowledged that few teenagers used Instagram’s “Take a Break” feature before it became a default setting, as Meta faces a major U.S. trial over child safety.
Start your day informed with AnewZ Morning Brief. Here are the top news stories for the 26th of August, covering the latest developments.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment