Two British hackers who carried out a cyberattack on Transport for London (TfL) that cost the transport authority £29 million to remediate have been jailed for a total of 11 years.
Thalha Jubair, 20, and Owen Flowers, 18, were each sentenced to five and a half years in prison on Thursday after admitting their roles in the attack, which took place between 31 August and 3 September 2024.
The pair pleaded guilty last month, on what would have been the first day of their trial, to offences linked to the breach of TfL's computer systems. Flowers also admitted carrying out cyberattacks against two non-profit healthcare providers in the U.S. shortly after the TfL hack.
Sentencing the pair at Woolwich Crown Court, Judge Mark Turner said they had been "primarily motivated by selfish bravado, heedless of the severe consequences for others".
Prosecutors said the hackers gained the highest level of access within TfL's network, effectively obtaining what was described in court as "the keys to the kingdom".
At one stage, they had the ability to lock administrators out of the system and potentially shut down critical services entirely.
The cyberattack led to the theft of data belonging to millions of customers, forced 27,000 TfL employees to reset their passwords and disrupted services, including the Dial-a-Ride booking system used by disabled passengers.
Although London's Underground and bus services continued operating, TfL said the intrusion had the potential to cause catastrophic damage and prolonged disruption across the network.
Andy Lord, TfL's commissioner, described it as the most serious cyber incident he had encountered during his career.
Investigators said the hackers communicated throughout the operation using Telegram, while Flowers recorded a livestream that Jubair broadcast during the attack.
The pair were described as key figures within the loose English-speaking cybercrime network known as Scattered Spider, a group linked to a series of high-profile hacks in recent years.
Court documents showed the pair openly referred to the group during their communications.
Messages presented during the hearing included references to Scattered Spider, with one exchange appearing to joke about membership status and another boasting about the group's activities.
Authorities said the pair had accumulated significant wealth through cybercrime, including cryptocurrency holdings worth millions of dollars.
Owen Flowers
The case has highlighted the growing threat posed by young cybercriminals operating from their homes while targeting major organisations around the world.
Although the hackers led largely online lives, prosecutors said their actions had real-world consequences, affecting millions of commuters and imposing heavy costs on one of the world's largest public transport networks.
The sentencing brings to a close one of the most damaging cyberattacks ever suffered by TfL, but security experts say it also underscores the continuing challenge posed by loosely organised hacking groups such as Scattered Spider.
The U.S. military announced that it has completed a new wave of strikes against Iranian military targets under U.S. President Donald Trump's orders. T...
Kazakh President Kassym-Jomart Tokayev invited Chinese technology companies to expand investment in Kazakhstan during a business roundtable in Shangha...
Two British hackers who carried out a cyberattack on Transport for London (TfL) that cost the transport authority £29 million to remediate have been ...
The U.S. military announced that it has completed a new wave of strikes against Iranian military targets under U.S. President Donald Trump's orders. The operation targeted command centres, air defence systems, missile and drone facilities, and coastal surveillance sites across multiple locations.
Officials from more than 20 oil-producing countries have agreed on a roadmap to strengthen international cooperation in the oil industry during a meeting in Azerbaijan. The plan aims to deepen collaboration across key areas, including markets, technology, investment and regulation.
As the 2026 Fifa World Cup tournament draws to a close, there’s much to anticipate and yet so much to look back at.
Peace. Prosperity. New political forces. A technology-driven economy. Following Armenia’s parliamentary election, AnewZ took to the streets of Yerevan to ask people how they imagine their country five years from now.
U.S. President Donald Trump announced the reimposition of a U.S. naval blockade on all Iranian ports and warned that power plants and bridges could be targeted next week unless Tehran returns to negotiations.
The United States carried out a third consecutive night of airstrikes against Iran, targeting military capabilities around the Strait of Hormuz as Donald Trump announced the reinstatement of a blockade on Iranian shipping and proposed a 20% fee on cargo passing through the strategic waterway.
The death toll from the fire at a live music pub in Bangkok has climbed to 32 after two more victims died from their injuries, according to Thailand's Police Hospital.
Ukraine and Russia exchanged fresh attacks on Tuesday, with Kyiv targeting shipping and energy infrastructure inside Russia while Moscow launched another large-scale missile and drone assault on Ukrainian cities.
The U.S. military announced that it has completed a new wave of strikes against Iranian military targets under U.S. President Donald Trump's orders. The operation targeted command centres, air defence systems, missile and drone facilities, and coastal surveillance sites across multiple locations.
At least 11 people have been killed and 19 injured in a fire at an orphanage on the outskirts of the Algerian capital, state media reported. The blaze broke out early on Thursday at the institution in the eastern suburbs of Algiers.
A woman whose husband was sucked out of the window of a plane during a Ryanair flight has recounted pulling her husband to safety. Serbian couple Svetlana Maksimovic and Ljubisa Karovic had just settled into a flight with the airline last week, when a loud bang pierced the hum of engines.
Russia launched a fresh wave of missile strikes on Ukraine early on Thursday, saying it had hit military and industrial facilities in Kyiv, as well as key port infrastructure in the southern Odesa region.
Uganda is expected to discharge its final Ebola patient on Thursday, beginning the 42-day countdown required before the country can be declared free of the virus if no new cases emerge, according to a government spokesperson.
The U.S. Coast Guard has called off its search for three people missing after a pontoon boat capsized near Alcatraz, leaving four people dead or presumed dead.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment