CyberSIXT Search
Original
Image: Security Affairs

Security AffairsPierluigi Paganini

UK police arrested two teen Scattered Spider members linked to the 2024 attack on Transport for London

Part of the Scattered Spider story · 58 articles · 11 outlets · since 28 Aug 2025

UK police have arrested two teenagers who are members of the Scattered Spider group in connection with the August 2024 cyberattack on Transport for London (TfL), according to the National Crime Agency announcement. The suspects are Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall in the West Midlands, who were detained at their home addresses on a Tuesday.

They face charges of conspiring together to commit unauthorised acts against TfL under the Computer Misuse Act, with investigators linking the alleged network intrusion on 31 August 2024 to Scattered Spider. The NCA said the attack caused significant disruption and millions of pounds in losses to TfL, part of the UK’s critical national infrastructure, and noted ongoing collaboration with international partners, including the FBI. Flowers and Jubair remain in custody and are set to appear at Southwark Crown Court on 16 October 2025, with Jubair also facing additional RIPA charges.

Story timeline Scattered Spider

Full timeline
Show as table
Scattered Spider coverage
Published (UTC)OutletHeadline
Fri 19 Sep 2025 · 12:10 UTCSecurity AffairsUK police arrested two teen Scattered Spider members linked to the 2024 attack on Transport for London (this article)
Fri 26 Jun · 15:00 UTCSecurityWeekWeekly Security Roundup: Cellebrite, Tata Hack, AI Warnings
Wed 1 Jul · 20:12 UTCThe Hacker News19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Thu 2 Jul · 03:02 UTCSecurityOnlineTeen dual citizen extradited for Scattered Spider cyber extortion
Thu 2 Jul · 08:11 UTCSecurity AffairsTeen Peter Stokes Extradited to US Over $8m Jewelry Heist
Thu 2 Jul · 09:21 UTCInfosecurityUS extradites teen hacker linked to $100M Scattered Spider scheme
Fri 3 Jul · 09:51 UTCSecurityWeekUS extradites alleged Scattered Spider teen over jewelry heist
Mon 6 Jul · 17:42 UTCSecurityOnlineUS extradites hacker after Microsoft GDID tracks him despite VPN
Tue 7 Jul · 14:00 UTCThe Hacker NewsFBI tracks alleged Scattered Spider via Windows Device ID
Tue 7 Jul · 14:32 UTCInfosecurityScattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang
Thu 16 Jul · 12:20 UTCInfosecurityTeen hackers jailed for Transport for London cyberattack
Thu 16 Jul · 13:25 UTCSecurityWeekScattered Spider pair jailed five years for £29m TfL hack
Thu 16 Jul · 18:40 UTCThe Hacker NewsScattered Spider duo jailed 5.5 years for £29m TfL cyberattack
Thu 16 Jul · 18:40 UTCSecurity AffairsScattered Spider duo sentenced 5.5 years for £29m TfL cyberattack
Tue 22 Sep · 13:30 UTCDataBreachesTexas Man Admits Role in Scattered Spider Extortion Scheme

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device