UK Police Arrest Two Scattered Spider Hackers Over London Transport Breach

UK law enforcement agencies have arrested two individuals linked to the Scattered Spider cybercriminal group in connection with a sophisticated attack on London’s transport networks. The arrests were announced on Tuesday and involved 19-year-old Thalha Jubair of London and a second, unnamed suspect; both are accused of conspiring to commit unauthorised computer access, extortion and money laundering.

Investigators say the pair used social engineering and phishing to breach networks managed by Transport for London, encrypt sensitive data, and demand a ransom to prevent its public release. According to the complaint, Jubair has a broader role in at least 120 intrusions worldwide, and US prosecutors accuse him of computer and wire fraud and money laundering conspiracies, with extortionist payments amounting to over $115 million from 47 US-based victims.

The FBI’s Cyber Division supplied investigative support, and Transport for London reported discovery of unauthorised access in early 2025, with some disruption to passenger services and ticketing while contingency measures were deployed. Authorities emphasise that charges are allegations and defendants remain in custody pending extradition proceedings.