Two suspected Scattered Spider hackers plead not guilty over Transport for London cyberattack
Summary
Two British teenagers, Thalha Jubair (19) and Owen Flowers (18), have pleaded not guilty over a 2024 cyberattack on Transport for London (TfL). Both were arrested by the National Crime Agency (NCA) in September and remanded into custody after further action by investigators.
Flowers also faces additional charges alleging involvement in attacks on US healthcare organisations, specifically SSM Health Care Corporation and an attempt against Sutter Health. Jubair has an extra charge for refusing to provide passcodes for devices seized in the investigation, and the US Department of Justice previously unsealed a complaint against him.
The suspects are accused under one of the most serious cyber offences in UK law — conspiracy to commit an unauthorised act in relation to a computer causing or creating risk of serious damage to human welfare or national security — an offence that carries a maximum potential sentence of life imprisonment. The NCA says the TfL attack caused significant disruption and millions of pounds in losses. The case sits alongside a rising caseload for the NCA, including breaches affecting NHS bodies and major UK retailers.
Key Points
- Two teenagers, Thalha Jubair (19) and Owen Flowers (18), pleaded not guilty to charges over the TfL hack.
- Both were arrested by the NCA in September and subsequently remanded into custody after further investigative action.
- Flowers faces additional US-related charges tied to alleged attacks on SSM Health Care Corporation and Sutter Health.
- Jubair faces a separate charge for refusing to disclose passcodes for seized devices; a US DOJ complaint was previously unsealed against him.
- The principal charge alleges conspiracy to commit an unauthorised computer act causing risk to human welfare or national security — offences that can carry life sentences.
- The NCA says the TfL attack caused substantial disruption and millions in losses, and has highlighted the growing threat from English-speaking cybercriminal groups like Scattered Spider.
- The case involves international cooperation (including the FBI) and forms part of a broader uptick in investigations into attacks on critical services and major companies in the UK and US.
- Contempt of court rules prevent public commentary that could prejudice a forthcoming jury trial.
Why should I read this?
Short version: this is a big deal. Two young suspects, severe charges (life sentence on the table), TfL disruption, and cross‑border links to US healthcare hacks. If you care about national infrastructure, cybercrime trends or how law enforcement is handling high‑profile hacks, this story cuts to the chase — and saves you the time of digging through court filings and agency statements yourself.
Source
Source: https://therecord.media/transport-for-london-hack-scattered-spider-suspects-plead-not-guilty
