London, November 27, 2025
Two British teenagers have pleaded not guilty to charges related to a major cyber attack on Transport for London (TfL) in August 2024, which caused severe disruption and financial loss, as authorities allege their involvement through the hacking group known as “Scattered Spider.”
Court Proceedings and Charges
Jubair and Flowers appeared at Southwark Crown Court on November 21, 2025, denying charges that include computer misuse, fraud, and causing or creating a significant risk of serious damage to human welfare. Flowers was arrested shortly after the TfL breach in September 2024 and was later released on bail, while Jubair faces additional allegations for not disclosing seized passwords in March 2025.
Impact of the TfL Cyber Attack
The August 2024 breach affected one of the largest transportation networks in the world, leading to millions of pounds in damages and compromising customer data. The attack caused widespread operational disruption to TfL, a critical component of the UK’s national infrastructure, raising serious concerns about cybersecurity vulnerabilities.
Wider Criminal Network and U.S. Connections
The scope of criminal activity extends beyond the UK. Flowers faces further charges tied to cyber attacks against SSM Health Care Corporation and Sutter Health in the United States. In September 2025, the U.S. Department of Justice charged Jubair with conspiracy to commit computer fraud, money laundering, and wire fraud related to at least 120 network breaches across 47 U.S. organizations between May 2022 and September 2025.
National Crime Agency Perspective
Paul Foster, head of the National Crime Agency’s National Cyber Crime Unit, highlighted the increased threat posed by cybercriminals operating from the UK and other English-speaking countries. He emphasized the serious disruption caused by the TfL incident, underlining Scattered Spider as a prime example of this growing risk to critical national infrastructure.
This case underscores ongoing challenges in protecting essential public services against sophisticated cyber threats. Investigations continue as authorities seek to dismantle the wider criminal network behind these breaches and prevent further attacks on both UK and international targets.