Two teenagers, believed to be linked to the August 2024 cyberattack on Transport for London, have been arrested in the United Kingdom.
Believed to be members of the notorious Scattered Spider hacking collective, 18-year-old Owen Flowers from Walsall and 19-year-old Thalha Jubair from East London are scheduled to appear at Westminster Magistrates Court today.
Flowers was previously arrested for his alleged involvement in the TfL attack in September 2024, but was released on bail after being questioned by officers of the UK National Crime Agency.
Since then, NCA investigators have found additional evidence potentially linking Flowers to attacks against U.S. healthcare companies.
The two suspects are being prosecuted for computer misuse and fraud-related charges linked to an investigation into the breach of London's public transportation agency. Additionally, Flowers faces charges for conspiring to attack the networks of SSM Health Care Corporation and Sutter Health in the United States.
"This attack caused significant disruption and millions in losses to TfL, part of the UK's critical national infrastructure," said Deputy Director Paul Foster, the head of the NCA's National Cyber Crime Unit.
"Earlier this year, the NCA warned of an increase in the threat from cyber criminals based in the UK and other English-speaking countries, of which Scattered Spider is a clear example."
The U.S. Department of Justice also charged Thalha Jubair today with conspiracies to commit computer fraud, money laundering, and wire fraud, in relation to at least 120 network breaches and extortion attacks against 47 U.S. organizations between May 2022 and September 2025.
The complaint, filed in the District of New Jersey and unsealed today, alleges that victims have paid Jubair and his accomplices at least $115,000,000 in ransom payments.
The Transport for London cyberattack
... continue reading