Overview

• Thalha Jubair, 19, and Owen Flowers, 18, appeared at Westminster Magistrates' Court after Sept. 16 arrests by the NCA and City of London Police and were remanded to appear at Southwark Crown Court on Oct. 16.
• Both are charged under the Computer Misuse Act with conspiring to commit unauthorised acts against TfL; Flowers also faces counts tied to alleged intrusions at U.S. healthcare firms SSM Health Care and Sutter Health, while Jubair faces a RIPA charge for refusing to disclose device PINs and passwords.
• Prosecutors and the NCA said the 2024 intrusion, attributed to members of the Scattered Spider collective, caused extensive disruption and losses to TfL, with a £39m figure cited in court.
• TfL reported weeks of disrupted online services, disabled APIs and account access, and exposure of personal and refund banking data for roughly 5,000 Oyster users, with total costs reported in the tens of millions of pounds.
• Separately, the U.S. Justice Department charged Jubair with computer fraud, wire fraud and money laundering tied to at least 120 intrusions affecting 47 U.S. organizations, alleging victims paid at least $115m, with prior cryptocurrency seizures noted by investigators.