TWO young men, Owen Flowers (18) and Thalha Jubair (20), were sentenced to five years and six months in prison for their cyber-attack on Transport for London (TfL), motivated by 'selfish bravado' rather than financial gain. They pled guilty to unauthorized acts under the UK's Computer Misuse Act, marking only the second prosecution of its kind in the UK. The attack caused £29 million in losses and affected operational systems, including the Oyster refund system and Dial-a-Ride booking.
They gained access to TfL's systems through social engineering, exploiting employee credentials and persisted in their efforts to escalate their access. This case underscores the significant threat posed by their group, Scattered Spider, to UK cybersecurity.