{"id":8887,"date":"2026-07-15T13:31:09","date_gmt":"2026-07-15T13:31:09","guid":{"rendered":"https:\/\/login9ja.com\/global\/teenage-hackers-cost-tfl-29000000-after-extremely-serious-cyberattack\/"},"modified":"2026-07-15T13:31:09","modified_gmt":"2026-07-15T13:31:09","slug":"teenage-hackers-cost-tfl-29000000-after-extremely-serious-cyberattack","status":"publish","type":"post","link":"https:\/\/login9ja.com\/global\/teenage-hackers-cost-tfl-29000000-after-extremely-serious-cyberattack\/","title":{"rendered":"Teenage hackers cost TfL \u00a329,000,000 after &#8216;extremely serious&#8217; cyberattack"},"content":{"rendered":"<div id=\"article-body\">\n<h2 class=\"LeadText_lead-text__wd_PA __className_feca84\" data-testid=\"leadtext\">Thalha Jubair, 20, and Owen Flowers, 18, could have caused &#8216;catastrophic damage&#8217;, with more than 27,000 employees affected &#8211; this is a breaking story<\/h2>\n<div class=\"Byline_byline-container__K_Owl\" data-testid=\"byline\"><span class=\"Byline_byline-content-wrapper__Imque\" data-testid=\"byline-content\"><\/p>\n<div class=\"Byline_author-badge-date-wrapper__Q7jj1\">\n<p><span class=\"\" data-testid=\"byline-publishedDate\"><\/span><span class=\"ArticleTimestamp_updated-date__7qD4Q ArticleTimestamp_updated-date-with-published__iFKpF\" data-testid=\"byline-updatedDate\">Updated <\/span><\/p>\n<\/div>\n<p><\/span><\/div>\n<p><button type=\"button\" class=\"SlideViewerButton_slide-viewer-button__BDJoG\" aria-label=\"Open image viewer\" aria-haspopup=\"dialog\" aria-controls=\"image-lightbox\"><\/p>\n<div class=\"ImageEmbed_image-embed__0T8WX ImageEmbed_image-lead__Ti3qQ\" data-testid=\"leadimage\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-articleid=\"37434965\">\n<div class=\"ImageEmbed_image-container__2AIQm\">\n<figure class=\"Figure_figure__Uce4f\" style=\"--figure-aspect-ratio:1.5\"><img decoding=\"async\" alt=\"Thalha Jubair and Owen Flowers hacked TfL's online network\" loading=\"eager\" sizes=\"(max-width: 508px) 508px, (max-width: 615px) 615px, 1200px\" src=\"https:\/\/i2-prod.mirror.co.uk\/article37434965.ece\/ALTERNATES\/s1200f\/0_Cyber-attack-on-TfL-court-case.jpg\" srcset=\"https:\/\/i2-prod.mirror.co.uk\/article37434965.ece\/ALTERNATES\/s508\/0_Cyber-attack-on-TfL-court-case.jpg 508w, https:\/\/i2-prod.mirror.co.uk\/article37434965.ece\/ALTERNATES\/s615\/0_Cyber-attack-on-TfL-court-case.jpg 615w, https:\/\/i2-prod.mirror.co.uk\/article37434965.ece\/ALTERNATES\/s1200f\/0_Cyber-attack-on-TfL-court-case.jpg 1200w\"\/><\/figure>\n<\/div><figcaption class=\"ImageCaption_caption__j7HRu\" data-testid=\"image-caption\">\n<p aria-label=\"Thalha Jubair and Owen Flowers hacked TfL's online network\" class=\"ImageCaption_caption-title__ccyQU\" data-testid=\"caption-title\">Thalha Jubair and Owen Flowers hacked TfL&#8217;s online network<cite aria-label=\"Image: NCA\/PA Wire\" class=\"ImageCaption_caption-credit__wlx1W\" data-testid=\"caption-credit\">(Image: NCA\/PA Wire)<\/cite><\/p>\n<\/figcaption><\/div>\n<p><\/button><\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\">Two &#8220;experienced and talented&#8221; hackers cost Transport for London (TfL) \u00a329million after an &#8220;extremely serious&#8221; hack.<\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\">Thalha Jubair, 20, and Owen Flowers, 18, conducted the cyberattack on TfL\u2019s online network which could have done &#8220;catastrophic damage&#8221; between August 31 and September 3, 2024.<\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\">As a result of the hack, all of TfL\u2019s more than 27,000 employees were forced to attend an office to reset their passwords. The attack included data from the Oyster refund system being accessed, delaying contactless systems and closing down applications for Oyster photocards for children and young people.<\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\">Jubair and Flowers, the culprits behind the &#8220;multi-day intrusion&#8221;, appeared at Woolwich Crown Court today, having admitted their roles in the hack. They were found to be connected to the Scattered Spider group, which the National Crime Agency (NCA) linked to other cyberattacks on Jaguar Land Rover and retailers including Marks &amp; Spencer.<\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\">Mark Fenhalls KC, prosecuting, said: &#8220;These two young men are highly skilled with computers and capable of wreaking havoc and you may think wholly indifferent to the consequences for the public and the potential suffering and costs to others.&#8221; Along with the \u00a329 million in damages from disruption to services and operational work, TfL claims the incident cost \u00a310 million in lost income.<\/p>\n<p class=\"Paragraph_paragraph-text__PVKlh\" data-tmdatatrack=\"content-unit\" data-tmdatatrack-type=\"paragraph\"><strong class=\"Strong_strong__e2x35\">This is<\/strong><strong class=\"Strong_strong__e2x35\"> a Breaking News story. You\u2019ll be more likely to see our stories when any big news breaks in future by <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/tk.cmnky.co\/api\/v1\/tracker?cm_session=7d1c895d-3236-4f0c-b2b0-a05260645913&amp;cs=3af4f5d7-79b9-4160-8ef1-c150323bd3f1&amp;i=323844f81d7f3689abbe17a024719d9ed8bf4d372&amp;cls=4a03dee1-164c-48c0-b699-5ed91654e72b&amp;cm_type=link&amp;cm_link=319c3e02-b3d4-488a-9d43-174d4724b990&amp;cm_destination=https:\/\/www.google.com\/preferences\/source?q=mirror.co.uk\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">simply by clicking this link<\/strong><\/a><strong class=\"Strong_strong__e2x35\">. You can also join The Mirror\u2019s <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/tinyurl.com\/4afexv9f\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">WhatsApp Community<\/strong><\/a><strong class=\"Strong_strong__e2x35\"> or follow us on<\/strong><strong class=\"Strong_strong__e2x35\"> <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMKmuoAkwrqBw\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Google News<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/flipboard.com\/@TheMirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Flipboard<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/apple.news\/T9JyAi8QDQeyz9DbMoW8CFQ\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Apple News<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.tiktok.com\/@dailymirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">TikTok<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.snapchat.com\/p\/4d149c4f-304c-4300-b381-daf641d05888\/3298987203495937\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Snapchat<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.instagram.com\/dailymirror\/\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Instagram<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/x.com\/DailyMirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Twitter<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.facebook.com\/dailymirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Facebook<\/strong><\/a><strong class=\"Strong_strong__e2x35\">, <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.youtube.com\/@dailymirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">YouTube<\/strong><\/a><strong class=\"Strong_strong__e2x35\"> and<\/strong><strong class=\"Strong_strong__e2x35\"> <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.threads.net\/@dailymirror\" rel=\"nofollow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">Threads<\/strong><\/a><strong class=\"Strong_strong__e2x35\"> <\/strong><strong class=\"Strong_strong__e2x35\">&#8211; or<\/strong><strong class=\"Strong_strong__e2x35\"> <\/strong><a target=\"_blank\" aria-label=\"[object Object]Link opens in a new tab.\" class=\"TextLink_text-link__dBSS0 TextLink_enabled__dJF3l\" href=\"https:\/\/www.mirror.co.uk\/\" rel=\"follow\" tabindex=\"0\" target=\"_blank\"><strong class=\"Strong_strong__e2x35\">visit The Mirror homepage<\/strong><\/a><strong class=\"Strong_strong__e2x35\">.<\/strong><\/p>\n<\/div>\n<p><script async src=\"\/\/www.instagram.com\/embed.js\"><\/script><script async src=\"\/\/www.tiktok.com\/embed.js\"><\/script><\/p>\n<p><a href=\"https:\/\/www.mirror.co.uk\/news\/uk-news\/teenage-hackers-cost-tfl-29000000-37429269\" target=\"_blank\">Source link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Thalha Jubair, 20, and Owen Flowers, 18, could have caused &#8216;catastrophic damage&#8217;, with more than<\/p>\n","protected":false},"author":1,"featured_media":8888,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-8887","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crime"],"jetpack_featured_media_url":"https:\/\/login9ja.com\/global\/wp-content\/uploads\/2026\/07\/0_Cyber-attack-on-TfL-court-case.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/posts\/8887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/comments?post=8887"}],"version-history":[{"count":0,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/posts\/8887\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/media\/8888"}],"wp:attachment":[{"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/media?parent=8887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/categories?post=8887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/login9ja.com\/global\/wp-json\/wp\/v2\/tags?post=8887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}