By ADAM POGRUND, REPORTER Published: 16:42 BST, 18 September 2025 | Updated: 16:42 BST, 18 September 2025
Two teenagers have appeared in court after being accused of a 'serious, extensive, sustained and highly sophisticated' cyber attack on Transport for London (TfL).Thalha Jubair, 19, and Owen Flowers, 18, were arrested on Tuesday for their alleged attack which cost TFL £39million.The alleged attack, which took place between August 31 and September 3 last year, posed 'significant risk' to the UK economy and London residents, Westminster Magistrates' Court was told on Thursday. The hacks prevented live Tube arrival information on TfL Go and the TfL website while online journey history was unavailable. TfL was also unable to process any payments on the Oyster and contactless apps or to register Oyster cards to customer accounts.The pair are charged with conspiring together to commit unauthorised acts against TfL under the Computer Misuse Act and were arrested as part of a joint investigation by National Crime Agency (NCA) and City of London Police.Flowers, of Walsall, was first arrested over the TfL attack in September 2024 and then arrested again this week. He is also charged with targeting US healthcare firms. Two teenagers have appeared in court after being accused of a 'serious, extensive, sustained and highly sophisticated' cyber attack on Transport for London (TfL) TfL was also unable to process any payments on the Oyster and contactless apps or to register Oyster cards to customer accountsThe 18-year-old is accused of conspiring with others to infiltrate and damage the networks of SSM Health Care Corporation and attempting to do the same to Sutter Health.Jubair, from Tower Hamlets, east London, faces an additional charge under the Regulation of Investigatory Powers Act of failing to disclose the Pin or passwords of his devices.The NCA said investigators believe the TfL cyber attack was carried out by the criminal hacking collective known as Scattered Spider, which has been linked to other cyber attacks on Jaguar Land Rover and retailers including Marks and Spencer.Deputy Director Paul Foster, head of the NCA's National Cyber Crime Unit, said: 'Today's charges are a key step in what has been a lengthy and complex investigation.'This attack caused significant disruption and millions in losses to TfL, part of the UK's critical national infrastructure.'Earlier this year, the NCA warned of an increase in the threat from cyber criminals based in the UK and other English-speaking countries, of which Scattered Spider is a clear example.'The NCA, UK policing and our international partners, including the FBI, are collectively committed to identifying offenders within these networks and ensuring they face justice.'Hannah Von Dadelszen, chief crown prosecutor for the Crown Prosecution Service, said: 'The Crown Prosecution Service has decided to prosecute Thalha Jubair and Owen Flowers with computer misuse and fraud related charges following a National Crime Agency investigation into a cyber-attack on the Transport for London network.'Our prosecutors have worked to establish that there is sufficient evidence to bring the case to trial and that it is in the public interest to pursue criminal proceedings.'We have worked closely with the National Crime Agency as they carried out their investigation.'Transport for London identified that there had been a cyber attack on September 1 last year, in which customer details including names, contact information and Oyster card refund data including bank details were accessed.
