By Nick Horner
Copyright birminghammail
Owen Flowers, 18, from Walsall , and Thalha Jubair, 19, from East London, were arrested at their homes on Tuesday, September 16 this year by the National Crime Agency and City of London Police. Flowers was initially arrested for the TfL attack on September 6, 2024, at which point NCA officers identified further potential evidence of offending against US healthcare companies. Both were charged with conspiring together to commit unauthorised acts against TfL, under the Computer Misuse Act after authorisation by the Crown Prosecution Service. Flowers was also charged with conspiring with others to infiltrate and damage the networks of SSM Health Care Corporation and attempting to do the same to Sutter Health’s networks, both based in the US. Jubair has been additionally charged under RIPA (Regulation of Investigatory Powers Act 2000) for failing to disclose the pin or passwords for devices seized from him. They appeared at Westminster Magistrates Court on Thursday, September 18. Flowers and Jubair have been remanded into custody and are both due to appear at Southwark Crown Court on 16 October 2025. READ MORE: Birmingham murder probe after ‘deliberate’ house fire – updates Deputy Director Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “The charges are a key step in what has been a lengthy and complex investigation. “This attack caused significant disruption and millions in losses to TfL, part of the UK’s critical national infrastructure. “Earlier this year, the NCA warned of an increase in the threat from cyber criminals based in the UK and other English-speaking countries, of which Scattered Spider is a clear example. “The NCA, UK policing and our international partners, including the FBI, are collectively committed to identifying offenders within these networks and ensuring they face justice.” Get the latest BirminghamLive news direct to your inbox The NCA investigation has also been supported by the West Midlands Regional Organised Crime Unit and British Transport Police. Hannah Von Dadelszen, Chief Crown Prosecutor for the Crown Prosecution Service, said: “The Crown Prosecution Service has decided to prosecute Thalha Jubair and Owen Flowers with computer misuse and fraud related charges – following a National Crime Agency investigation into a cyber-attack on the Transport for London network. “Our prosecutors have worked to establish that there is sufficient evidence to bring the case to trial and that it is in the public interest to pursue criminal proceedings. “We have worked closely with the National Crime Agency as they carried out their investigation.” The NCA said: “Victims of cybercrime should use the Government’s Cyber Incident Signposting Site for direction on which agencies to report an incident to. www.cyberchoices.uk “The Cyber Choices programme helps people make informed choices to use their cyber skills in a legal way.” 4143 (651) Done
