Two members of the cybercrime group Scattered Spider pleaded guilty in the United Kingdom to charges related to a major 2024 cyberattack against Transport for London’s computer systems.

Key Points

• Thalha Jubair and Owen Flowers admitted to conspiring to commit unauthorized acts against Transport for London and causing risks to human welfare.
• Flowers also pleaded guilty to hacking U.S.-based healthcare providers SSM Health Care Corporation and Sutter Health in September 2024.
• U.S. prosecutors allege Jubair participated in 120 network intrusions between 2022 and 2025, resulting in at least $115 million in ransom payments.
• The group utilized SIM-swapping, SMS phishing, and fraudulent emergency data requests to compromise major companies including LastPass, DoorDash, and Signal.
• Jubair and Flowers are scheduled to be sentenced in a London court on July 15, 2026.

Why it Matters

These convictions represent a significant blow to the Scattered Spider collective, a prolific group responsible for high-profile ransomware attacks against global infrastructure and major corporations. The case highlights the increasing effectiveness of international cooperation between U.S. and U.K. law enforcement in dismantling sophisticated cybercrime syndicates.