Two British teenage hackers behind one of the most damaging cyberattacks on London’s public transport network have been sentenced to a combined 11 years in prison.
The massive 2024 attack caused severe financial and operational chaos, costing Transport for London (TfL) a staggering $39.16 million to repair and restore the compromised systems.
Who Are the Hackers and How Were They Caught?
The sentenced individuals are Thalha Jubair, 20, and Owen Flowers, 18. Both pleaded guilty last month—on what would have been the first day of their trial—for the attacks carried out in August and September of 2024.
- The Connection to “Scattered Spider”: Investigators revealed that the duo operated under the banner of, or in cooperation with, the notorious global hacker collective “Scattered Spider”, which is widely known for sophisticated cyberattacks and corporate extortion.
- Parallel Attacks in the US: Owen Flowers did not stop with London. Just days after targeting TfL, he hit two non-profit healthcare systems in the United States. Flowers was arrested red-handed while in the middle of executing these secondary cyberattacks.
The Court’s Ruling
Judge Mark Turner sentenced both Jubair and Flowers to five and a half years in prison each. During sentencing, the judge sharply criticized their motives, stating the teenagers were driven entirely by self-interest:
“They were primarily motivated by selfish bravado, entirely oblivious to the catastrophic consequences their actions brought upon millions of others.”
The case is considered a landmark victory for British cybercrime units, sending a clear deterrent message to emerging hacker syndicates.
