Two suspected Scattered Spider hackers plead not guilty over Transport for London cyberattack

Two British teenagers, Thalha Jubair, 19, and Owen Flowers, 18, charged with Computer Misuse Act offences over a cyberattack on Transport for London last year, have pleaded not guilty at London’s Southwark Crown Court. They were arrested at their homes in East London and Walsall by officers from the National Crime Agency in September and remain in custody ahead of the trial.

Flowers had earlier been arrested over the September 2024 TfL attack but was released on bail; the two men were remanded into custody following their most recent arrest. According to The Record, the U.S. Department of Justice charged Jubair’s case in September, and Flowers faces additional U.K. charges related to alleged conspiracies to infiltrate and damage U.S. healthcare entities SSM Health Care Corporation and Sutter Health, with Flowers pleading not guilty to those charges in the U.K. court.

BBC reporting places the trial date at 8 June 2026, with the hearing expected to last four to six weeks, and both defendants remain on remand in the interim.