Teen Hackers Plead Guilty in £39m TfL Cyberattack, Allegedly Continued Crimes from Custody

Two young Britons have pleaded guilty to a cyberattack on Transport for London (TfL) that prosecutors say cost the agency £39 million. Thalha Jubair, 20, and Owen Flowers, 18, changed their pleas on the first day of their trial, according to The Guardian. They are linked to the Scattered Spider hacking group, a loose collective known for targeting large organizations.

The attack on TfL’s online network caused significant disruption and financial loss. Both The Standard and The Independent reported that prosecutors described the loss at £39 million. The teenagers now face prison sentences for their role in the incident, which authorities have described as a serious breach of critical infrastructure.

2 sources

The StandardYoung cybercriminals behind Transport for London hack chaos face jailThe IndependentYoung cybercriminals facing jail over TfL hack that cost millions

But the case has taken a troubling turn. Rankiteo reported that Jubair and Flowers are also accused of carrying out further cyberattacks while already in custody. “The suspects, allegedly involved in high-profile incidents targeting Transport for [London],” the outlet wrote, “are accused of carrying out cyberattacks while in custody, raising serious concerns about prison security measures.” This allegation, if proven, would mark an escalation from external hacking to operations conducted from behind bars.

RankiteoMarks & Spencer and Jaguar Land Rover: TfL Cyberattack Suspects allegedly continue Cybercrime from behind the Bars

The development highlights vulnerabilities in prison monitoring of tech-savvy inmates. The ability of young hackers to allegedly continue criminal activity while detained suggests that standard security protocols may be inadequate against sophisticated digital threats. Authorities have not yet commented on how the alleged prison-based attacks were carried out.

Both Jubair and Flowers are now awaiting sentencing. Their case serves as a stark reminder of the growing sophistication and audacity of young cybercriminals, who may view incarceration as a temporary setback rather than a definitive stop to their activities.