Two Scattered Spider Hackers Sentenced to Jail in UK
Two members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, were sentenced to prison in the UK for their role in a 2024 attack on Transport for London, resulting in significant financial losses. The NCA’s action significantly hampered the group’s operations, and other members are still under investigation and prosecution in both the UK and the US.
Two members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, were sentenced to prison in the United Kingdom for their involvement in a 2024 cyberattack targeting Transport for London (TfL). The attack caused substantial disruptions and resulted in approximately £29 million ($39 million) in damages. Jubair and Flowers initially pleaded not guilty but changed their pleas to guilty during their trial in June.
Despite continued activity from other cybercriminals using the Scattered Spider brand throughout early 2026, the NCA asserts that the sentencing of Jubair and Flowers effectively disrupted the group’s criminal operations. Microsoft has independently confirmed this assessment, stating that the arrests substantially degraded the group’s ability to conduct cybercriminal activities.
Authorities are continuing to investigate and prosecute other suspected members of the group, including Peter Stokes, a dual US-Estonian national, who was recently extradited to the US to face charges. Tyler Buchanan, a British national, also pleaded guilty in a US court in April. The ongoing investigations highlight the persistent threat posed by the Scattered Spider group and the lengths to which authorities are going to combat cybercrime.