Two British hackers who carried out a cyberattack on Transport for London (TfL) that cost the transport authority £29 million to remediate have been jailed for a total of 11 years.
Thalha Jubair, 20, and Owen Flowers, 18, were each sentenced to five and a half years in prison on Thursday after admitting their roles in the attack, which took place between 31 August and 3 September 2024.
The pair pleaded guilty last month, on what would have been the first day of their trial, to offences linked to the breach of TfL's computer systems. Flowers also admitted carrying out cyberattacks against two non-profit healthcare providers in the U.S. shortly after the TfL hack.
Sentencing the pair at Woolwich Crown Court, Judge Mark Turner said they had been "primarily motivated by selfish bravado, heedless of the severe consequences for others".
Prosecutors said the hackers gained the highest level of access within TfL's network, effectively obtaining what was described in court as "the keys to the kingdom".
At one stage, they had the ability to lock administrators out of the system and potentially shut down critical services entirely.
The cyberattack led to the theft of data belonging to millions of customers, forced 27,000 TfL employees to reset their passwords and disrupted services, including the Dial-a-Ride booking system used by disabled passengers.
Although London's Underground and bus services continued operating, TfL said the intrusion had the potential to cause catastrophic damage and prolonged disruption across the network.
Andy Lord, TfL's commissioner, described it as the most serious cyber incident he had encountered during his career.
Investigators said the hackers communicated throughout the operation using Telegram, while Flowers recorded a livestream that Jubair broadcast during the attack.
The pair were described as key figures within the loose English-speaking cybercrime network known as Scattered Spider, a group linked to a series of high-profile hacks in recent years.
Court documents showed the pair openly referred to the group during their communications.
Messages presented during the hearing included references to Scattered Spider, with one exchange appearing to joke about membership status and another boasting about the group's activities.
Authorities said the pair had accumulated significant wealth through cybercrime, including cryptocurrency holdings worth millions of dollars.
Owen Flowers
The case has highlighted the growing threat posed by young cybercriminals operating from their homes while targeting major organisations around the world.
Although the hackers led largely online lives, prosecutors said their actions had real-world consequences, affecting millions of commuters and imposing heavy costs on one of the world's largest public transport networks.
The sentencing brings to a close one of the most damaging cyberattacks ever suffered by TfL, but security experts say it also underscores the continuing challenge posed by loosely organised hacking groups such as Scattered Spider.
Saudi Arabia’s air defences have intercepted and destroyed a hostile drone over the Riyadh region, according to the Saudi-led coalition fight...
Police were deployed across Paris on Saturday, as a curfew was set to take effect in the Republique and Chât...
A drone strike hit a power station in northern Sudan early Sunday (1 November), sparking a fire and triggering loud explosions, witnesses said....
The U.S. has approved the sale of 500 Patriot PAC-3 missiles to Ukraine in a deal worth an estimated $2.1 billion, but Kyiv could face years of delays before receiving the weapons it urgently needs to defend against intensifying Russian attacks.
Iranian Supreme Leader Ayatollah Khamenei has ordered Iran's armed forces to respond to any threat immediately and without geographical limits in statements posted to social media platforms on Saturday (31 October).
Demonstrators carrying Iranian flags and placards supporting the hijab gathered outside the Azerbaijani Embassy in London.
A Chinese-made AI chip has matched Nvidia’s H200 in tests conducted by its developer, marking a potential breakthrough in China’s efforts to reduce its dependence on foreign technology.
A hacking group linked to North Korea is widely believed to be behind the theft of $6.3 billion from cryptocurrency giant Binance, a cyberattack that experts describe as the largest cryptocurrency heist on record.
Police were deployed across Paris on Saturday, as a curfew was set to take effect in the Republique and Châtelet-Les Halles areas from 11pm Saturday until 6am Sunday (1 November).
A drone strike hit a power station in northern Sudan early Sunday (1 November), sparking a fire and triggering loud explosions, witnesses said.
Gen Z protests swept 34 German cities on Saturday (31 October) over education and living costs. Violence erupted in Frankfurt, where shops were looted and police reported Molotov cocktail attacks.
Iran designated Britain's Royal Navy and Royal Air Force as terrorist organisations on Sunday, (1 November), and classified the country's foreign intelligence agency, MI6, as a hostile group, according to a statement from the Iranian Foreign Ministry.
Thousands protested in Albania's capital, Tirana, on Saturday (31 October), demanding Prime Minister Edi Rama's resignation over perceived corruption allegations and dissatisfaction with the government over a lack of jobs and poor education standards.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment