# Teenagers Charged Over Cyber Attack on TfL Costing Millions of Pounds

In a significant development, two teenagers have been charged in connection with a devastating cyber attack on Transport for London (TfL), which has left the operator facing millions of pounds in losses and disruption.

Thalha Jubair, 19, from east London, and Owen Flowers, 18, from Walsall in the West Midlands, were arrested on Tuesday at their homes as part of an operation by officers from the National Crime Agency (NCA) and City of London Police. Both are due to appear at Westminster Magistrates' Court on Thursday charged with conspiring together to commit unauthorized acts against TfL under the Computer Misuse Act.

The cyber attack, which occurred on August 31, 2024, targeted customer data including names and contact details, resulting in significant disruption to the transport network. However, fortunately, there was no wider disruption to services, but the incident has cost TfL millions of pounds in losses and recovery.

According to reports, the attackers accessed customer data, forcing TfL to shut down some areas of operation, including traffic cameras, "dial-a-ride" bookings, and processes payments. The attack was described by TfL as "sophisticated" and "aggressive," highlighting the severity of the incident.

Flowers, who was first arrested on September 6, 2024, is also accused of potential offending against US healthcare companies. He has been charged with conspiring to infiltrate and damage the networks of SSM Health Care Corporation and attempting to do the same to Sutter Health's networks.

Jubair has been additionally charged for failing to disclose the pin or passwords for devices seized from him. Deputy Director Paul Foster, head of the NCA's Cyber Crime Unit, described the charges as a "key step" in a "lengthy and complex investigation."

"This attack caused significant disruption and millions in losses to TfL, part of the UK's critical national infrastructure," he added. "Earlier this year, the NCA warned of an increase in the threat from cyber criminals based in the UK and other English-speaking countries, of which Scattered Spider is a clear example.

The NCA, UK policing, and international partners, including the FBI, are collectively committed to identifying offenders within these networks and ensuring they face justice," Foster emphasized. He also thanked TfL for its "swift action" in reporting the cyber attack and its "engagement" with the NCA on the investigation.

Scattered Spider is a notorious hacking network that has been linked to large-scale attacks on three well-known retailers in the UK this year. M&S was targeted by cyber criminals in April, causing disruption lasting months. The British retailer halted online orders, was unable to process contactless payments, and shelves were empty in shops. It's estimated that the cyber attack will cost M&S up to £300m this year.

The NCA investigation has also involved support from the West Midlands Regional Organized Crime Unit and British Transport Police, highlighting the collaborative efforts being made to tackle cybercrime.

Stay tuned for further updates on this developing story, and follow our channel for the latest news.