Particle.news
Download on the App Store
26 ARTICLES
·
13h ago

UK Charges Teens in TfL Cyberattack as US Unseals Sweeping Case Against Alleged Scattered Spider Member

Prosecutors say the London intrusion ties into a help‑desk extortion campaign that extracted at least $115 million from 47 U.S. victims.

Image
a photo of outside the DOJ in Washington DC
Image
Acting Assistant Attorney General Matthew R. Galeotti speaks during a press conference at the U.S. Attorney’s Office on August 25, 2025.

Overview

  • Thalha Jubair, 19, and Owen Flowers, 18, were charged under the Computer Misuse Act over the August 31, 2024 breach of Transport for London and appeared at Westminster Magistrates’ Court, with a Crown Court hearing set for October 16.
  • The U.S. Department of Justice unsealed charges against Jubair in New Jersey alleging at least 120 network intrusions and extortion against 47 U.S. entities, with a maximum potential sentence of 95 years if convicted.
  • Flowers faces additional UK charges over alleged conspiracies targeting U.S. healthcare providers SSM Health Care Corporation and Sutter Health.
  • TfL’s attack disrupted Oyster and contactless account logins and third‑party API services, exposed personal data for roughly 5,000 customers, and has cost the operator well over £30 million.
  • Authorities link the case to the Scattered Spider collective that used help‑desk social engineering to reset credentials, with the investigation led by the NCA and City of London Police alongside the FBI and partners in several countries.