One of Britain's most notorious cyber hackers was jailed for five years on Thursday for a £29million attack on the transport network – and could now be extradited to the US.

Thalha Jubair, 20, and his associate Owen Flowers, 18, took down Transport for London (TfL) in a four-day cyber attack in 2024 which threatened to cause £56billion of 'catastrophic damage'.

The pair could have 'shut down TfL completely' but bosses managed to 'pull the plug' on its network before they did.

Sentencing them each to five years and six months in jail at Woolwich Crown Court, Judge Mark Turner said: 'I'm satisfied your actions were motivated by selfish bravado, heedless of the severe consequences to others.'

Now Jubair faces subsequent extradition to the US over even graver charges. He has been charged in New Jersey over allegations of extorting at least £87million through hacks on 47 American companies and organisations between 2022 and 2025.