‘Scattered Spider’ teens charged over London transportation hack

Two teenagers have been officially charged after a cyberattack on London’s public transportation network. The case, tied to the notorious Scattered Spider cybercrime group, has drawn national attention as investigators reveal the hack caused significant disruption and millions in losses.

The London hack linked to Scattered Spider

UK investigators confirmed that the attack against Transport for London (TfL) in August 2024 was carried out by members of Scattered Spider. The group has gained infamy for targeting major companies and infrastructure, raising concerns about the growing sophistication of young hackers.

Authorities say the intrusion forced parts of TfL’s system offline, disrupting travel across the city. Paul Foster, head of the National Crime Agency’s (NCA) cybercrime unit, described the incident as one of the most impactful transportation hacks the UK has seen in recent years.

Teens arrested and charged

The suspects, identified as Thalha Jubair, 19, and Owen Flowers, 18, were arrested at their homes on Tuesday. Both face charges under the UK’s Computer Misuse Act for conspiracy to commit unauthorized acts against TfL.

Prosecutors allege the teens played an active role in breaching TfL’s systems as part of Scattered Spider’s broader operations. The group, composed of hackers from the UK and US, has also been tied to high-profile attacks against MGM Resorts, Caesars Entertainment, and retailer Marks & Spencer.

Cybercrime warning from UK authorities

“This is a clear example of the rise in cybercriminal activity from English-speaking countries,” Foster said. “The charges against these individuals represent a key step in a lengthy investigation into Scattered Spider.”

The NCA had previously issued warnings about the group, noting its aggressive tactics and willingness to target both corporations and public services. The latest arrests highlight how even teenagers are becoming central players in global cybercrime networks.

Why this matters

The London transportation hack underscores how vulnerable critical infrastructure can be to cyberattacks. With Scattered Spider now linked to multiple international cases, cybersecurity experts warn that more incidents could follow unless defenses are strengthened.

For Londoners, the charges bring some reassurance—but also serve as a reminder of the increasing risks digital systems face from organized online crime.