Scattered Spider Members Sentenced to 66 Months for TfL Cyberattack
Summary
Thalha Jubair and Owen Flowers pleaded guilty and were sentenced to 66 months for the 2024 attack that halted Transport for London operations. Authorities linked them to Scattered Spider; officials say the group’s activity continues.
Key points
- Thalha Jubair and Owen Flowers received 66-month sentences after pleading guilty to the 2024 cyberattack that brought Transport for London operations to a standstill.
- Researchers described the pair as leading members of Scattered Spider, associated with the broader cybercriminal collective The Com.
- U.S. authorities accused Jubair of involvement in at least 120 cyberattacks, including extortion targeting 47 U.S. organizations.
- A criminal complaint said two financial services firms paid Jubair $25 million and $36.2 million in Bitcoin; officials said they traced at least $89.5 million in cryptocurrency to addresses and servers he controlled.
- U.K. officials said the arrests and sentences severely disrupted Scattered Spider, while noting other criminals continue to use the group’s name; an analyst said the lasting impact remains unclear.
Article Details
- Event Type
- Sentencing of two men for a cyberattack on Transport for London
- Impact
- The 2024 attack brought Transport for London network operations to a standstill. Thalha Jubair and Owen Flowers each received a 66-month prison sentence after pleading guilty. U.K. officials said the arrests and prosecution disrupted Scattered Spider, while noting that others continue to use the group’s name.
People
Adam MeyersCrowdStrike senior vice president of counter adversary operations; said Jubair was one of four people associated with Scattered Spider and one of its two most core players.Allison NixonUnit 221B chief research officer; commented on the alleged reinvestment of victim payments and the sentences’ leniency.Brett LeathermanFBI Cyber Division assistant director; described the prosecution as holding two Scattered Spider members accountable.Paul FosterHead of the National Crime Center’s National Cybercrime Unit; said the investigation disrupted the threat and brought offenders to justice.
Threat Actors
Owen FlowersPleaded guilty and was sentenced to 66 months for the 2024 cyberattack on Transport for London. Authorities linked him to Scattered Spider; investigators also said he was in the process of hacking U.S. health care companies when arrested.Scattered SpiderAuthorities and researchers linked Jubair and Flowers to the group. Officials said their arrests and punishment disrupted its criminal activity, while noting that other cybercriminals continue to use the Scattered Spider name. The group was described as using data extortion, SIM-swap attacks, and social engineering.Thalha JubairPleaded guilty and was sentenced to 66 months for the 2024 cyberattack on Transport for London. U.K. and U.S. authorities linked him to Scattered Spider and other cyberattacks; U.S. authorities accused him of involvement in at least 120 attacks.The ComDescribed by researchers as a criminal collective and as the broader group of which Scattered Spider is a subset; Jubair and Flowers were reported to be involved with it.