Overview

• Thalha Jubair, 19, and Owen Flowers, 18, appeared at Westminster Magistrates’ Court after September 16 arrests by the National Crime Agency and ty of LoLondon Police.
• Both are charged under the Computer Misuse Act over the 2024 TfL intrusion, and Jubair also faces a RIPA Section 49 charge for refusing to disclose device PINs and passwords.
• The court remanded both to appear at Southwark Crown Court on October 16, and investigators say they believe the suspects are linked to the Scattered Spider collective.
• The breach disrupted online services, exposed data for about 5,000 Oyster customers, and has cost TfL well over £30m, with prosecutors citing a £39m loss figure in court.
• US prosecutors separately charged Jubair over at least 120 intrusions affecting 47 US organizations with at least $115m in ransom payments, while Flowers faces UK counts tied to alleged attacks on SSM Health and Sutter Health.