Two alleged Scattered Spider members pleaded guilty to carrying out the September 2024 cyberattack on Transport for London, which disrupted transit-related services for months and exposed customer data tied to Oyster refund systems. The U.K. National Crime Agency said the pair infiltrated TfL's network, forcing 28,000 employees to reset passwords in person and contributing to about £29 million in losses and recovery costs; investigators also cited evidence of Telegram coordination and access to stolen-credential marketplaces.
info@thehackernews.com (The Hacker News)
2026.07.16
98% relevant
This appears to be a direct update to the same underlying event: the 2024 Transport for London hack by alleged Scattered Spider members. The new information is sentencing detail, including that the two hackers each received 5.5-year prison terms and the reported £29 million impact tied to the TfL incident.
Eduard Kovacs
2026.07.16
98% relevant
This updates the same underlying TfL/Scattered Spider case with the final UK court outcome: Thalha Jubair and Owen Flowers were each sentenced to five years and six months, and the NCA said the arrests materially degraded the group's operations.
2026.07.16
96% relevant
This article updates the same underlying event by reporting that the two defendants, Owen Flowers and Thalha Jubair, were each sentenced to five and a half years in prison after pleading guilty, with the NCA calling it the largest cybercrime prosecution in UK history and emphasizing the attack's disruption to TfL.
Sergiu Gatlan
2026.07.16
97% relevant
This is a direct update to the same underlying event: the 2024 Transport for London breach by Scattered Spider. It adds that the two defendants, Thalha Jubair and Owen Flowers, were each sentenced to five years and six months, reiterates operational disruption and data theft at TfL, and notes Flowers was also allegedly targeting Sutter Health and SSM Health at the time of arrest.
2026.07.16
98% relevant
This is a direct update on the same TfL incident and the same defendants, adding the final sentence of 5.5 years each, the £29 million recovery cost, details on operational disruption, and NCA claims that the arrests significantly disrupted Scattered Spider.
SecurityWeek News
2026.06.26
98% relevant
This source directly updates the same guilty-plea case and adds operational impact details from the 2024 Transport for London compromise, including disruption to fare refund systems, millions in remediation costs, and in-person password resets for 28,000 employees.
BrianKrebs
2026.06.23
98% relevant
This article directly updates that same underlying event by reporting that Owen Flowers and Thalha Jubair pleaded guilty on the first day of trial over the August 2024 Transport for London attack, and adds details linking Flowers to the SSM Health and Sutter Health intrusions and Jubair to broader Scattered Spider phishing and SIM-swapping activity.
Bill Toulas
2026.06.23
99% relevant
This article covers the same underlying TfL intrusion and updates it with the defendants' guilty pleas, the NCA's statement that the attack caused £29 million in losses, details that 28,000 staff had to reset passwords in person, and added evidence tying the pair to the breach and to other intrusions.
2026.06.23
100% relevant
This article establishes a distinct tracked story because the existing list does not already include the Transport for London breach and this source provides the core event: guilty pleas, official attribution to Scattered Spider, timing, operational impact, and scope of exposed data.