Close Menu
  • Home
  • Cybercrime and Ransomware
  • Emerging Tech
  • Threat Intelligence
  • Expert Insights
  • Careers and Learning
  • Compliance

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

What's Hot

Breaking the Chain: Defeating Social Engineering Attacks

July 16, 2026

Scattered Hackers Get 5.5 Years Each for £29M TfL Breach

July 16, 2026

Unified Framework to Accelerate Software Vulnerability Remediation

July 16, 2026
Facebook X (Twitter) Instagram
The CISO Brief
  • Home
  • Cybercrime and Ransomware
  • Emerging Tech
  • Threat Intelligence
  • Expert Insights
  • Careers and Learning
  • Compliance
Home » Scattered Hackers Get 5.5 Years Each for £29M TfL Breach
Uncategorized

Scattered Hackers Get 5.5 Years Each for £29M TfL Breach

Staff WriterBy Staff WriterJuly 16, 2026No Comments3 Mins Read0 Views
Facebook Twitter Pinterest LinkedIn Tumblr Email
Share
Facebook Twitter LinkedIn Pinterest WhatsApp Email

Quick Takeaways

  1. Owen Flowers and Thalha Jubair were sentenced to five and a half years for hacking Transport for London, causing £29 million in damages and system outages.
  2. The attack disrupted key services, exposed customer data, and was stopped when TfL pulled its network down, preventing potentially billions in losses.
  3. Both are linked to the notorious "Scattered Spider" cybercrime group, involved in global data extortion, fraud, and cryptocurrency theft.
  4. Authorities believe their arrests significantly weakened the group’s capabilities, emphasizing the importance of early law enforcement intervention in cyber threats.

Hackers Sentenced in Landmark Case for TfL Cyberattack

Two young hackers received five-and-a-half-year prison sentences after targeting Transport for London (TfL) in 2024. They, aged 18 and 20, caused significant disruption by knocking 148 TfL systems offline. This forced 27,000 employees to reset passwords in person, resulting in a loss and recovery cost of £29 million. The attack lasted from August 31 to September 3, 2024, and affected essential services like Dial-a-Ride and contactless payments. TfL’s data breach included names, emails, home addresses, and, in some cases, banking details. While the hackers claimed they were reckless about the damage their actions could cause, prosecutors argued their intent to cause widespread harm. This case marks a notable milestone in UK cybercrime law, as it is believed to be the first successful prosecution under a strict section of the Computer Misuse Act. The incident underscores the importance of robust cybersecurity measures and early law enforcement intervention in preventing such attacks.

Impact, Investigation, and Broader Context

The attack by the hackers was part of a larger pattern linked to the group known as Scattered Spider, which has carried out numerous cybercrimes since 2022. The operation was highly sophisticated, with chats and shared workspaces revealing their intent to extract and potentially destroy data. The authorities seized devices from one of the hackers, showing evidence of their connection to multiple attacks, including other US healthcare organizations. In addition to their UK sentencing, the hackers face ongoing investigations into their activities in the United States, where one is accused of corrupt schemes involving millions of dollars. Experts believe that the disruption caused by their arrest has significantly weakened the group’s ability to operate, although other criminal groups may continue using similar tactics. Officials urge organizations to verify identities rigorously when resetting passwords and managing access, recognizing that human factors often trigger breaches. This case highlights the ongoing battle against cyber threats and the need for proactive cybersecurity practices to protect critical infrastructure worldwide.

Discover More Technology Insights

Explore the future of technology with our detailed insights on Artificial Intelligence.

Stay inspired by the vast knowledge available on Wikipedia.

DataProtection-V1

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleUnified Framework to Accelerate Software Vulnerability Remediation
Next Article Breaking the Chain: Defeating Social Engineering Attacks
Avatar photo
Staff Writer
  • Website

John Marcelli is a staff writer for the CISO Brief, with a passion for exploring and writing about the ever-evolving world of technology. From emerging trends to in-depth reviews of the latest gadgets, John stays at the forefront of innovation, delivering engaging content that informs and inspires readers. When he's not writing, he enjoys experimenting with new tech tools and diving into the digital landscape.

Related Posts

Microsoft Maps Salesforce Attack Paths Linked to Year of ShinyHunters Activity

July 14, 2026

Windows Device ID Unveiled: Key to FBI’s Capture of Alleged Scattered Spider Hacker

July 7, 2026

South Korea Denies Discrimination Allegations Against Coupang

July 2, 2026

Comments are closed.

Latest Posts

Unified Framework to Accelerate Software Vulnerability Remediation

July 16, 2026

EU Condemns Russia’s Malicious Cyber Operations Linked to FSB’s 16th Centre

July 16, 2026

When AI Gets a Body, a Whole New Attack Surface Opens

July 16, 2026

The Executive Profile Your Security Team Isn’t Defending

July 16, 2026
Don't Miss

Microsoft Maps Salesforce Attack Paths Linked to Year of ShinyHunters Activity

By Staff WriterJuly 14, 2026

Essential Insights Attackers exploit trusted OAuth connections in Salesforce, often through social engineering, to gain…

Windows Device ID Unveiled: Key to FBI’s Capture of Alleged Scattered Spider Hacker

July 7, 2026

South Korea Denies Discrimination Allegations Against Coupang

July 2, 2026

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

Recent Posts

  • Breaking the Chain: Defeating Social Engineering Attacks
  • Scattered Hackers Get 5.5 Years Each for £29M TfL Breach
  • Unified Framework to Accelerate Software Vulnerability Remediation
  • EU Condemns Russia’s Malicious Cyber Operations Linked to FSB’s 16th Centre
  • TELEPUZ Malware Uses ClickFix for Data Theft and Command Execution
About Us
About Us

Welcome to The CISO Brief, your trusted source for the latest news, expert insights, and developments in the cybersecurity world.

In today’s rapidly evolving digital landscape, staying informed about cyber threats, innovations, and industry trends is critical for professionals and organizations alike. At The CISO Brief, we are committed to providing timely, accurate, and insightful content that helps security leaders navigate the complexities of cybersecurity.

Facebook X (Twitter) Pinterest YouTube WhatsApp
Our Picks

Breaking the Chain: Defeating Social Engineering Attacks

July 16, 2026

Scattered Hackers Get 5.5 Years Each for £29M TfL Breach

July 16, 2026

Unified Framework to Accelerate Software Vulnerability Remediation

July 16, 2026
Most Popular

Protecting MCP Security: Defeating Prompt Injection & Tool Poisoning

January 30, 202634 Views

Unlock the Power of Free WormGPT: Harnessing DeepSeek, Gemini, and Kimi-K2 AI Models

November 27, 202530 Views

The New Face of DDoS is Impacted by AI

August 4, 202528 Views

Archives

  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025

Categories

  • Compliance
  • Cyber Updates
  • Cybercrime and Ransomware
  • Editor's pick
  • Emerging Tech
  • Events
  • Featured
  • Insights
  • Most Read
  • Threat Intelligence
  • Uncategorized
© 2026 thecisobrief. Designed by thecisobrief.
  • Home
  • About Us
  • Advertise with Us
  • Contact Us
  • DMCA
  • Privacy Policy
  • Terms & Conditions

Type above and press Enter to search. Press Esc to cancel.