Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London

Thalha Jubair and Owen Flowers, linked to the Scattered Spider hacking group, change pleas on first day of trial Two British cybercriminals from the Scattered Spider hacking group have pleaded guilty to a cyber-attack on Transport for London in 2024 that cost £39m and affected 10 million people. Thalha Jubair, 20, and Owen Flowers, 18, pleaded guilty to offences under the Computer Misuse Act at Woolwich crown court on Monday. Continue reading...

Source-feed image associated with the linked report: Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London.Credit: The Guardian Source-feed thumbnail displayed with attribution and outbound source link; VINI does not claim ownership or republish the third-party article body. Image source Cached source-feed image shown for continuity with attribution and an outbound source link; VINI does not claim third-party image authorship or republish the third-party article body.

Reading time1 min

coverage / Source report

Source file1 public source

Open source summary

Reader responseTechnology

Right of reply / send a tip

SupportDonate

Fund future reporting

Vinita Duniphin Technology Source report

What happened

According to The Guardian’s source item, Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London, Thalha Jubair and Owen Flowers, linked to the Scattered Spider hacking group, change pleas on first day of trial Two British cybercriminals from the Scattered Spider hacking group have pleaded guilty to a cyber-attack on Transport for London in 2024 that cost £39m and affected 10 million people. Thalha Jubair, 20, and Owen Flowers, 18, pleaded guilty to offences under the Computer Misuse Act at Woolwich crown court on Monday. Continue reading…

Context

The development sits in VINI’s Technology file for readers following technology, science, product policy, markets, infrastructure, and the public consequences of innovation. The original report is linked so readers can check the source account, follow later updates, and compare new coverage against the first published record. The source item is dated 2026-06-22T16:49:40+00:00.

What to watch

Open questions include whether primary sources issue follow-up statements, whether local or market impacts become clearer, and whether additional reporting changes the timeline or adds material context.

Source

Primary source: Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London via The Guardian. VINI cites and links the source; it does not reproduce the publisher’s full article text without rights clearance.

This source-cited VINI report links to the original publisher record. VINI does not republish third-party article bodies without rights clearance. 1 source listed.

Reader comments

Moderated discussion

Account access

Comments are open to authenticated approved accounts, screened for spam and abuse, and published only after newsroom moderation unless editors change the story control.

Loading comments.