News summary produced by Claude AI
Owen Flowers and Thalha Jubair were sentenced to five years and six months in prison for their roles in a significant cyber-attack against Transport For London. The two men, who were teenagers at the time of the attack, pleaded guilty in June to carrying out the breach in 2024. They were members of Scattered Spider, a loosely organized cyber crime collective known for coordinating multiple attacks across international targets.
The cyber-attack, which lasted 16 hours and was streamed online by the perpetrators, caused substantial disruption to TfL’s operations. The breach resulted in the compromise of personal data belonging to millions of customers and forced all 27,000 TfL employees to reset their passwords in person. The attack rendered 148 technology systems inoperable and heavily disrupted services including Dial-a-ride, which serves disabled and vulnerable Londoners. TfL reported the financial impact at £29 million, with an additional £10 million in lost income.
Flowers, from Walsall, was 17 years old at the time of the attack on August 31, while Jubair, from east London, was 18. Both men gained initial access by manipulating a phone help desk worker into resetting an employee’s password. The court heard that both individuals were described as computer-obsessed loners who spent significant time online with limited offline social connections. Judge Mr Justice Turner cited their young age and autism diagnoses as mitigating factors during sentencing.
Flowers had previously received a cease and desist order for minor cyber offenses, and was later arrested in September 2024 while actively hacking US healthcare providers. Jubair had an extensive history with law enforcement, including a prior Youth Rehabilitation Order for hacking with the Lapsus$ cyber crime group and 22 previous convictions related to hacking, fraud, and harassment. Police recovered cryptocurrency holdings worth approximately £1 million from the investigation.
The National Crime Agency indicated that the rise of young hackers represents one of the largest cyber security threats facing the nation. Officials emphasized the role of online exposure to criminal communities and the need for coordinated efforts among parents, educators, technology companies, and law enforcement to protect young people from such influences.