British police announced Thursday that the imprisonment of two teenage hackers has dealt a major blow to the notorious cybercrime group Scattered Spider. Owen Flowers, 18, and Thalha Jubair, 20, were sentenced to five years and six months in prison for their role in a 2024 cyberattack on Transport for London (TfL), the agency that runs London's public transit system. Authorities say the disruption has "severely" hampered the group's operations.
A significant blow to a major cybercrime threat
Paul Foster, head of the U.K. National Crime Agency's National Cyber Crime Unit, described Scattered Spider as "the most significant cybercrime threat to the U.K. in recent years." He stated that the investigation has "severely disrupted that threat and brought key offenders to justice." The group has been linked to high-profile attacks on companies like casino giant MGM, airline WestJet, and cybersecurity firm Okta, often gaining access to customer data.
The case highlights how some of the most dangerous hackers are young individuals motivated by money and notoriety, rather than state-sponsored actors with vast resources. Groups like Scattered Spider and ShinyHunters frequently target employees through social engineering rather than exploiting technical vulnerabilities, a strategy that is both effective and difficult to defend against.
The TfL attack and its aftermath
Flowers and Jubair pleaded guilty to hacking TfL in summer 2024, taking down systems including the ticketing system and real-time train arrival information for weeks. The attack caused an estimated £29 million (about $47 million) in losses. According to The Guardian, the hackers had such deep access that they "could have shut out and shut down TfL completely," holding "the keys to the kingdom" to the agency's systems.
The two were arrested a year after the attack. At the time, the FBI accused Jubair of involvement in attacks on more than 120 companies using social engineering tactics. While hacking group members often come and go, and groups can rebrand, British authorities are confident that the imprisonment of Flowers and Jubair represents a significant setback for Scattered Spider.