Two UK Teenagers Charged Over TfL Hack Linked to Scattered Spider

The cyberattack that disrupted Transport for London (TFL) websites and services in September 2024 has led to charges against two teenagers accused of working with the Scattered Spider hacking group.

Nineteen-year-old Thalha Jubair of East London and eighteen-year-old Owen Flowers of Walsall were arrested by the National Crime Agency on 16 September 2025 and brought before Westminster Magistrates’ Court. Prosecutors allege the pair conspired to breach TfL systems under the Computer Misuse Act, causing millions in damage and impacting parts of London’s critical infrastructure.

The incident did not stop the Underground from running, but it disrupted important services around it. Customers struggled to log into Oyster and contactless payment accounts, and third-party transit apps that rely on TfL’s APIs were knocked offline. Investigators estimate more than £30 million in costs so far, covering remediation, lost revenue, and security upgrades.

Roughly 5,000 Oyster users also had their personal ...