--- title: Two Scattered Spider members jailed for 2024 Transport... description: Owen Flowers (18) and Thalha Jubair (20), members of the Scattered Spider hacking collective, have been sentenced to five and a half years each for a 2024... canonical: https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Two Scattered Spider members jailed for 2024 Transport for London cyberattack | daily.dev og:description: Owen Flowers (18) and Thalha Jubair (20), members of the Scattered Spider hacking collective, have been sentenced to five and a half years each for a 2024... og:url: https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy og:image: https://api.daily.dev/og/posts/z1TxbHaGY.png og:image:alt: Two Scattered Spider members jailed for 2024 Transport for London cyberattack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Two Scattered Spider members jailed for 2024 Transport for London cyberattack **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Owen Flowers (18) and Thalha Jubair (20), members of the Scattered Spider hacking collective, have been sentenced to five and a half years each for a 2024 cyberattack on Transport for London — the largest cybercrime prosecution in UK history. The attack began with purchased employee credentials and a vishing call to TfL's help desk to bypass two-factor authentication. Over 16 hours, the attackers compromised personal data of up to 10 million customers, took down 148 systems, and caused £29 million in remediation costs. Forensic evidence including attack videos and crypto payment trails secured the conviction. Jubair also faces US charges linked to 120 network compromises and over $115 million in ransom payments. The National Crime Agency is now pushing for Cyber Crime Risk Orders, citing gaps in existing law that allowed repeat offending, and flagged a growing trend of young UK-based hackers motivated by online notoriety. ## Content Owen Flowers, 18, and Thalha Jubair, 20, have each been sentenced to five and a half years in prison for hacking Transport for London in August 2024. Both are members of Scattered Spider, a loosely organized cybercrime collective linked to attacks on MGM Resorts, WestJet, and Okta. ## How the attack worked The pair bought partial employee credentials from criminal forums, then social-engineered a TfL helpdesk worker into resetting an employee's two-factor authentication. That gave them network access for several days. The 16-hour attack — which they live-streamed online — knocked 148 technology systems offline, exposed the personal data of up to 10 million customers, and cost TfL £29 million to remediate. Authorities estimated the UK economy could have lost up to £56 billion had the attackers managed to shut down the broader transport network. ## What the evidence showed Forensic analysis of Flowers' laptop found videos of the attack in progress and cryptocurrency payment trails, which proved decisive at trial. Investigators also discovered that Flowers was actively hacking US healthcare companies at the time of his arrest. Both defendants were later found with contraband phones in prison, still coordinating future attacks. ## The broader picture on Jubair Jubair has 22 prior hacking convictions and faces additional US charges related to compromising at least 120 networks and facilitating over $115 million in ransom payments. The scale of his alleged activity makes the UK sentence look like a footnote. ## Why this case matters legally This is the largest cybercrime prosecution in UK history and only the second conviction under Section 3ZA of the Computer Misuse Act 1990. The National Crime Agency credited TfL's early cooperation with law enforcement as key to securing the convictions, and used the case to push for proposed Cyber Crime Risk Orders — arguing that existing law left gaps that allowed both defendants to keep reoffending despite prior police contact. The NCA says the arrests have "severely disrupted" Scattered Spider's operations. Security analysts are more cautious. The group draws in young people motivated largely by online notoriety, and prison sentences alone are unlikely to stop others from following the same path. ## Similar posts on daily.dev - [Scattered Spider members plead guilty to hacking Transport for London](https://daily.dev/posts/scattered-spider-members-plead-guilty-to-hacking-transport-for-london-r4dpnkjrs) · BleepingComputer · 0 upvotes · 0 comments - [Scattered Spider duo convicted over $38M Transport for London attack](https://daily.dev/posts/scattered-spider-duo-convicted-over-38m-transport-for-london-attack-xiwrjswb7) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Two Scattered Spider members jailed for 2024 Transport for London cyberattack","url":"https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy"},"datePublished":"2026-07-16T14:44:25.306Z","dateModified":"2026-07-17T00:18:31.864Z","description":"Owen Flowers (18) and Thalha Jubair (20), members of the Scattered Spider hacking collective, have been sentenced to five and a half years each for a 2024...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0ba279e49aa64cc09a43ab586c4c742?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0ba279e49aa64cc09a43ab586c4c742?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/two-scattered-spider-members-jailed-for-2024-transport-for-london-cyberattack-z1txbhagy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ransomware","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Two Scattered Spider members jailed for 2024 Transport for London cyberattack"}]} ```