![\"Teenagers](\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2026\/07\/SEC_305303257-bc34.jpg\")
\n\t\tThalha Jubair, now 20, and Owen Flowers, 18, carried out the \u2018extremely serious hack\u2019 on TfL\u2019s online network between August 31 and September 3, 2024 (Picture: PA)<\/p>\n
\t\t
\n\t\tThalha Jubair, now 20, and Owen Flowers, 18, carried out the \u2018extremely serious hack\u2019 on TfL\u2019s online network between August 31 and September 3, 2024 (Picture: PA)<\/p>\n
Two teenagers who hacked into Transport for London\u2019s computer systems could have cost the UK economy nearly \u00a360 billion, a court has heard.<\/p>\n
Thalha Jubair, 20, and Owen Flowers, 18, managed to get access to TfL\u2019s networks after tricking helpdesk staff into resetting a password. \u00a0<\/p>\n
The pair, linked to a group known as Scattered Spider which was behind attacks on Marks and Spencer and the Co-op, then used the system to hack itself further, getting deeper into the networks.<\/p>\n
Their hack was so successful that they obtained the highest privileged access, known as the keys to the kingdom.<\/p>\n
Prosecutor Mark Fenhalls KC told Woolwich Crown Court this gave them \u2018total control\u2019, enabling them to put ransomware throughout the entire system.<\/p>\n
\t\t\t\tSign up for all of the latest stories\t\t\t<\/p>\n
Start your day informed with Metro’s News Updates<\/a> newsletter or get Breaking News<\/a> alerts the moment it happens. <\/p>\n Facing catastrophic consequences, TfL pulled the plug on the entire system, resetting the passwords of all 27,000 staff. In the end, it cost TfL \u00a329 million.<\/p>\n If they had encrypted or destroyed the central TfL system he said there could have been a \u2018potential consequential loss of \u00a356 billion to the UK economy\u2019 through what TfL said would cause \u2018significant and extended transport service degradation and disruption.\u2019<\/p>\n TfL said: \u2018Such widespread disruption would have had a serious impact on the travelling public, including for those accessing education, healthcare and other essential services, and London\u2019s economy.\u2019<\/p>\n \t\t The pair carried out the hack between August 31 and September 3, 2024.<\/p>\n They worked through the night for 16 hours to access the network, with Flowers livestreaming the hack as Jubair carried it out.<\/p>\n Some of the videos were recovered when he was arrested three days later on September 6.<\/p>\n The pair were in constant contact throughout the attack and spoke about \u2018nuking access\u2019 to servers on their way out.<\/p>\n Mr Fenhalls said: \u2018They were utterly reckless about the consequences of hacking TfL, the transport network and the communications for the country.<\/p>\n \u2018It only came to an end because TfL threw them out rather than they chose to stop.\u2019<\/p>\n \t\t They used remote servers to conceal the origin of the attack, created virtual machines within the TfL system to destroy evidence, downloaded millions of lines of data from their systems and created multiple back doors.<\/p>\n Jubair\u2019s barrister Paul Keleher KC described him as a \u2018modern day Oliver Twist\u2019 who had been groomed from a young age to use his skills for hacking.<\/p>\n But Mr Justice Turner dismissed the comparison, saying: \u2018There\u2019s no Fagin in this case; it\u2019s a Faginless crime.<\/p>\n \u2018He has an audience but he doesn\u2019t have a puppet master, he\u2019s promoted himself to an instigator and perpetrator.\u2019<\/p>\n Flowers\u2019 barrister Adam Davis KC said he was an \u2018immature child trying to show off online\u2019. But when his laptop was seized following his arrest, it was in the process of hacking two US healthcare systems, SSM Health and Sutter Health.<\/p>\n Those hacks were only stopped because of the \u2018fortuitous timing\u2019 of his arrest, the court heard. He is wanted in the US but he is not beleived to be facing extradition proceedings.<\/p>\n After being placed on remand in September 2025, Flowers bought two \u2018unlawful phones\u2019 in prison and searched for logins to the Ministry of Justice, Wandsworth Prison staff, and the CPS.<\/p>\n Jubair, from east London, was sentenced last year for 22 offences including hacks on individuals, telecoms businesses and the City of London Police system.<\/p>\n Both men admitted conspiracy to commit unauthorised acts in relation to a computer causing or creating risk of serious damage.<\/p>\n Flowers, from Walsall, also admitted two counts of conspiracy to commit unauthorised acts in relation to a computer with intent to impair, in relation to the healthcare systems.<\/p>\n They will be sentenced tomorrow.<\/p>\n Get in touch with our news team by emailing us at webnews@metro.co.uk<\/a>.<\/p>\n For more stories like this, check our news page<\/a>.<\/p>\n Arrow Arrow Arrow![\"Undated](\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2026\/07\/SEI_305269952-ff9d-e1784131168631.jpg\")
\n\t\tThalha Jubair , one of two young members of a criminal hacking group who carried out a cyber attack on Transport for London (TfL) (Picture: NCA\/PA)<\/p>\n![\"Undated](\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2026\/07\/SEI_305269951-dd0c-e1784131195511.jpg\")
\n\t\tOwen Flowers was also linked to a group known as Scattered Spider (Picture: NCA\/PA)<\/p>\n
\nMORE: Covid cons said \u2018let\u2019s milk\u2019 PPE shortages splashing cash on Rolexes and Porsches<\/a><\/p>\n
\nMORE: First picture of Sikh mum, 24, stabbed to death in what parents fear was \u2018racist attack\u2019<\/a><\/p>\n
\nMORE: Teen who helped murder stranger \u2018for fun\u2019 handed huge sentence<\/a><\/p>\n