Two British hackers who carried out a cyberattack on Transport for London (TfL) that cost the transport authority £29 million to remediate have been jailed for a total of 11 years.
Thalha Jubair, 20, and Owen Flowers, 18, were each sentenced to five and a half years in prison on Thursday after admitting their roles in the attack, which took place between 31 August and 3 September 2024.
The pair pleaded guilty last month, on what would have been the first day of their trial, to offences linked to the breach of TfL's computer systems. Flowers also admitted carrying out cyberattacks against two non-profit healthcare providers in the U.S. shortly after the TfL hack.
Sentencing the pair at Woolwich Crown Court, Judge Mark Turner said they had been "primarily motivated by selfish bravado, heedless of the severe consequences for others".
Prosecutors said the hackers gained the highest level of access within TfL's network, effectively obtaining what was described in court as "the keys to the kingdom".
At one stage, they had the ability to lock administrators out of the system and potentially shut down critical services entirely.
The cyberattack led to the theft of data belonging to millions of customers, forced 27,000 TfL employees to reset their passwords and disrupted services, including the Dial-a-Ride booking system used by disabled passengers.
Although London's Underground and bus services continued operating, TfL said the intrusion had the potential to cause catastrophic damage and prolonged disruption across the network.
Andy Lord, TfL's commissioner, described it as the most serious cyber incident he had encountered during his career.
Investigators said the hackers communicated throughout the operation using Telegram, while Flowers recorded a livestream that Jubair broadcast during the attack.
The pair were described as key figures within the loose English-speaking cybercrime network known as Scattered Spider, a group linked to a series of high-profile hacks in recent years.
Court documents showed the pair openly referred to the group during their communications.
Messages presented during the hearing included references to Scattered Spider, with one exchange appearing to joke about membership status and another boasting about the group's activities.
Authorities said the pair had accumulated significant wealth through cybercrime, including cryptocurrency holdings worth millions of dollars.
Owen Flowers
The case has highlighted the growing threat posed by young cybercriminals operating from their homes while targeting major organisations around the world.
Although the hackers led largely online lives, prosecutors said their actions had real-world consequences, affecting millions of commuters and imposing heavy costs on one of the world's largest public transport networks.
The sentencing brings to a close one of the most damaging cyberattacks ever suffered by TfL, but security experts say it also underscores the continuing challenge posed by loosely organised hacking groups such as Scattered Spider.
Iran and the United States remain at loggerheads over efforts to agree a permanent end to the war in the Gulf, according to a senior Iranian source wh...
Central Asia’s economy has surpassed $543 billion, driven by Kazakhstan’s economic weight, strong exports and foreign investment, while growing tr...
The United Nations refugee agency is planning a settlement and carpet-weaving workshop for Afghan returnees in Kabul as the country grapples with larg...
Iran and the United States remain at loggerheads over efforts to agree a permanent end to the war in the Gulf, according to a senior Iranian source who said there had been no progress in talks to revive the interim deal agreed in June and define a timeframe to implement it.
U.S. President Donald Trump has called for Iran to pay compensation for decades of deaths and damage, adding a new demand to peace talks as Tehran seeks compensation and sanctions relief before reopening the Strait of Hormuz.
A criminal court in Damascus has sentenced former Syrian President Bashar al-Assad to death in absentia for premeditated murder, torture, arbitrary detention and crimes against humanity, according to Syria’s state news agency SANA.
Disruption in the Strait of Hormuz has increased the strategic importance of Bab al-Mandab, raising fears that instability in both waterways could trigger a wider global energy and trade crisis.
Ukrainian President Volodymyr Zelenskyy has warned that Russia is preparing to deploy additional North Korean forces on its territory and has received more ballistic missiles from Pyongyang, arguing that their growing military cooperation poses a threat beyond Ukraine.
Millions of people across Spain and Iceland are preparing on Wednesday to witness a rare total solar eclipse, when the moon will pass directly between Earth and the Sun, briefly turning daylight into darkness along a narrow path.
Ukraine has agreed to refrain from targeting certain tankers using Russia’s Black Sea port of Novorossiysk following a request from U.S. Vice President JD Vance, the Financial Times reported, although Kyiv has continued strikes on Russian targets at the port.
Taiwan has criticised a planned joint naval exercise involving China and Indonesia near its eastern waters, describing it as a politically charged move designed to strengthen Beijing's claims over areas surrounding the island.
An overnight Ukrainian drone attack on Russia’s Black Sea port city of Novorossiysk killed an eight-year-old child, injured others and damaged residential buildings, port infrastructure and grain facilities, Russian officials and industry sources said on Wednesday.
Romanian military divers have destroyed two Gerbera-type drones found drifting near the Neptun Deep offshore gas development in the country’s Black Sea exclusive economic zone.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment