By Wayne Williams
Copyright techradar
Skip to main content
Tech Radar Pro
Tech Radar Gaming
Close main menu
the business technology experts
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
View Profile
Search TechRadar
Expert Insights
Website builders
Web hosting
Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights
Don’t miss these
British man behind ‘IntelBroker’ hacker group charged with stealing millions
How cybercriminals have become smarter and more dangerous than ever before
M&S hackers claim to be behind Jaguar Land Rover cyberattack
M&S and Co-op hacks publicly defined as a single attack – and could cost more than £400 million
Ransomware disruptions contributed to a patient death, NHS finds
FBI warns Scattered Spider hackers are now going after airlines
Ransomware gang attacking NAS devices taken down in major police operation
UK Electoral Commission finally recovered from China hack after three years and £250,000 grant
M&S thinks it might finally know what caused cyberattack – but still won’t say if it paid a ransom
Top ransomware group BlackSuit has dark web extortion sites seized and shut down
Aeroflot hacked – Russia’s biggest airline forced to ground flights following attack
Marks & Spencer’s cyberattack isn’t an exception – it’s a warning
US government says BlackSuit and Royal ransomware gangs hit hundreds of major firms before shutdown
The UK wants to ban some organizations from paying ransomware demands
Hacker behind “Rapper Bot” DDoS-for-hire Botnet which carried out over 370,000 attacks arrested
Two teenagers charged over cyber hack on Transport for London
Wayne Williams
20 September 2025
Attack caused significant disruption and millions in losses to TfL
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Transport for London)
Two teenagers charged after TfL cyber attack linked to Scattered Spider criminal collective
NCA says hack caused millions in losses as TfL operations disrupted for months
CPS confirms prosecution as both men remanded ahead of October crown court appearance
Two teenage men have been charged over a recent cyberattack which left Transport for London (TfL) battling months of disruption and tens of millions in losses.
The National Crime Agency (NCA) said the intrusion, which began on August 31 2024, was linked to Scattered Spider, a cyber-criminal group it describes as an increasing threat.
Nineteen-year-old Thalha Jubair from east London and eighteen-year-old Owen Flowers from Walsall were arrested at their home addresses by NCA and City of London Police officers.
You may like
British man behind ‘IntelBroker’ hacker group charged with stealing millions
How cybercriminals have become smarter and more dangerous than ever before
M&S hackers claim to be behind Jaguar Land Rover cyberattack
Significant disruption and millions in losses
Both subsequently appeared at Westminster Magistrates Court, charged with conspiring to commit unauthorized acts against TfL under the Computer Misuse Act.
Flowers was already on bail when the TfL hack took place. After his arrest, officers identified evidence that he had also targeted US healthcare companies for which he now faces additional charges.
Jubair has been charged under the Regulation of Investigatory Powers Act for refusing to provide the passwords for devices seized from him.
Deputy Director Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “Today’s charges are a key step in what has been a lengthy and complex investigation. This attack caused significant disruption and millions in losses to TfL, part of the UK’s critical national infrastructure.”
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
Foster went on to add, “Earlier this year, the NCA warned of an increase in the threat from cyber criminals based in the UK and other English-speaking countries, of which Scattered Spider is a clear example. The NCA, UK policing and our international partners, including the FBI, are collectively committed to identifying offenders within these networks and ensuring they face justice.”
Both men have been remanded in custody and are due to appear in court in October.
Hannah Von Dadelszen, Chief Crown Prosecutor for the CPS, said, “The Crown Prosecution Service has decided to prosecute Thalha Jubair and Owen Flowers with computer misuse and fraud related charges… Our prosecutors have worked to establish that there is sufficient evidence to bring the case to trial and that it is in the public interest to pursue criminal proceedings.”
You may like
British man behind ‘IntelBroker’ hacker group charged with stealing millions
How cybercriminals have become smarter and more dangerous than ever before
M&S hackers claim to be behind Jaguar Land Rover cyberattack
TfL said in a statement, “We welcome this announcement by the National Crime Agency that two people have now been charged in relation to the cyber incident which impacted our operations last year.”
The hack forced TfL to write to 5,000 customers warning their bank details and personal information may have been exposed.
While transport services continued, online platforms and digital information systems were shut down for months.
Teenagers are increasingly behind major cyber attacks, including incidents targeting M&S, Co-op and Harrods, while others, some even younger, have been caught hacking their own schools.
You might also like
Take a look at the best VPNs with antivirus around today
And this is the best ransomware protection to use now
Only 20% of ransomware is not powered by AI, but expect that number to drop in 2025
Wayne Williams
Social Links Navigation
Wayne Williams is a freelancer writing news for TechRadar Pro. He has been writing about computers, technology, and the web for 30 years. In that time he wrote for most of the UK’s PC magazines, and launched, edited and published a number of them too.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
British man behind ‘IntelBroker’ hacker group charged with stealing millions
How cybercriminals have become smarter and more dangerous than ever before
M&S hackers claim to be behind Jaguar Land Rover cyberattack
M&S and Co-op hacks publicly defined as a single attack – and could cost more than £400 million
Ransomware disruptions contributed to a patient death, NHS finds
FBI warns Scattered Spider hackers are now going after airlines
Latest in Security
VPS servers hijacked into malware proxies – here’s how to stay safe
WatchGuard warns users Firebox firewalls may have a critical issue – here’s what we know
UK’s MI6 opens dark web portal Silent Courier to recruit Russian spies
New Gold Salem ransomware could be the most worrying new strain we’ve seen for a while
Most companies admit their current security can’t stop AI cybercrime
SonicWall customers told to reset credentials following firewall data breach
Latest in News
How to share your Gemini Gems custom AI experts with all your friends
Anthropic’s CEO gives ‘a 25% chance things go really, really badly’ with AI
This iOS 26 feature is causing drama at Apple Stores for iPhone 17 trade-ins – here’s how to avoid the same mistake
‘The bleaker the better’: Black Rabbit is Netflix’s new must-see show – here’s what people are saying about the Jude Law and Jason Bateman thriller
Fortnite creators can soon sell their own items and pay to advertise them
Naoki Yoshida, better known as Yoshi-P, has reassured fans that he’s not done with Final Fantasy 14 yet – and he’s not bored of working on it either
LATEST ARTICLES
How to share your Gemini Gems custom AI experts with all your friends
Thrustmaster T248R wheel review: an updated model that puts pressure on the mighty Logitech G923
Anthropic’s CEO gives ‘a 25% chance things go really, really badly’ with AI
I’ve tested and loved 6 Ecovacs Deebot robot vacuums – the T50 Max Pro Omni has been the first to disappoint me
Pop-out car door handles could finally disappear for good – as Tesla responds to global backlash about their safety
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future’s experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait…