2 teenagers were charged by US Department of Justice and the Crown Prosecution Service in England in
connection to attacks on TfL in August 2024, which resulted in a data breach potentially affecting thousands of customers whose names, contact information and bank details was accessed. Thalha Jubair, a 19-year-old from East London, was also charged with computer fraud, wire fraud and money laundering in relation to more than 120 network intrusions and extortion involving 47 US entities. He’s believed to have extracted $115mil (around £85mil) in ransom from his victims. His accomplice, Owen Flowers, an 18-year old from Walsall, has been accused of conspiring with others to infiltrate and damage the networks of SSM Health Care and attempting to target Sutter Health’s networks. Both are alleged to be part of Scattered Spider, a US and UK based hacking group whose previous high-profile targets include the casino, Caesars Entertainment and UK shops M&S, Co-op and Harrods. If convicted, they could spend a minimum of 14 behind bars.

Sources:
The Telegraph: Teenagers charged over multi-million pound tfl cyber-attack
BBC News: Teenagers charged over Transport for London cyber attack
Financial Times: Briton charged in US and UK over major cyber attacks