Written by admin
UK police arrested two teenagers for their suspected involvement in a devastating cyberattack on Transport for London (TfL).
The National Crime Agency (NCA) and City of London police arrested Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall, West Midlands, at their homes.
Both suspects face charges under the Computer Misuse Act for conspiring to commit unauthorized acts against TfL’s systems. The charges represent a significant development in what authorities describe as a lengthy and complex investigation.
Flowers faces extra charges beyond the TfL attack. Prosecutors allege he conspired to infiltrate and damage IT networks belonging to two major US healthcare providers: SSM Health Care Corporation and Sutter Health. These charges highlight the international scope of the criminal operation.
Jubair received an additional charge under the Regulation of Investigatory Powers Act 2000 (RIPA Act) for failing to provide passwords for devices seized during the investigation. This UK law regulates surveillance activities and communication access by public bodies.
The cyberattack occurred on August 31, 2024, though TfL didn’t publicly disclose the breach until September. Criminal hackers stole sensitive customer information including full names, contact details, and postal addresses.
The breach also compromised Oyster card refund data for approximately 5,000 customers, exposing their account information.
Authorities linked the attack to Scattered Spider, a notorious online criminal collective. The group has gained attention for targeting critical infrastructure and major organizations across multiple countries including Gucci, Allianz Life, and several others.
Deputy Director Paul Foster from the NCA’s National Cyber Crime Unit called these charges a “key step” in their ongoing investigation. The attack caused significant operational disruption and resulted in millions of dollars in losses for TfL, which forms part of the UK’s critical national infrastructure.
Both defendants appeared at Westminster Magistrates Court and have been remanded into custody. Their next court appearance is scheduled for October 16, 2025, at Southwark Crown Court.
The Crown Prosecution Service confirmed they have sufficient evidence to proceed to trial and determined that pursuing criminal proceedings serves the public interest.
This case demonstrates law enforcement’s commitment to pursuing cybercriminals who target critical infrastructure.
The arrests send a clear message that authorities will track down and prosecute those responsible for major cyberattacks, regardless of their age or location.
The international cooperation between UK and US authorities shows how serious these crimes have become in our connected world.
For more details on this story, refer to the press releases from the National Crime Agency and the US Department of Justice.
We want to know your thoughts. What do you think about this story? Let us know in the comment section below!
Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the Advisor with updates weekly.
This page includes affiliate links where TROYPOINT may receive a commission at no extra cost to you. Many times, visitors will receive a discount due to the special arrangements made for our fans. Learn more on my Affiliate Disclaimer page.
© IPTVSub is Proudly Owned by win-design