Stay up to date with notifications from The IndependentNotifications can be managed in browser preferences.Jump to contentThank you for registeringPlease refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged inAllNewsSportCultureLifestyleThalha Jubair and Owen Flowers (National Crime Agency)Two men, Thalha Jubair, 20, and Owen Flowers, 18, pleaded guilty to a cyber attack on Transport for London (TfL) that caused an estimated £39 million in losses. The attack, which occurred between 29 August and 6 September 2024, led to a password reset for 28,000 employees and compromised the Oyster refund system. Jubair and Flowers, identified as members of the 'Scattered Spider' hacking collective, changed their pleas at Woolwich Crown Court just before their trial. Owen Flowers also admitted to targeting US healthcare firms, with evidence found at his home including screenshots of TfL access and videos of Jubair. The pair are due to be sentenced on 15 and 16 July, with the National Crime Agency highlighting the significant impact of such cyber crimes on critical national infrastructure. In fullTwo members of criminal hacking group plead guilty to £39m TfL hackThank you for registeringPlease refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in

Thalha Jubair, 19, and Owen Flowers, 18, hacked into Transport for London's (TfL's) system between August 29 and September 3, 2024, causing chaos for Oyster card users.

Thalha Jubair, 20, and Owen Flowers, 18, hacked TfL’s network between August 29 2024 and September 6 2024

Stay up to date with notifications from The IndependentNotifications can be managed in browser preferences.Jump to contentThank you for registeringPlease refresh the page or…

Two men admit to hacking Transport for London in summer 2024 incident that caused months of chaos, following arrests last year

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024.