British law enforcement authorities say the imprisonment of two young hackers has dealt a significant blow to the cybercrime group known as Scattered Spider.

Owen Flowers, 18, and Thalha Jubair, 20, were sentenced to five years and six months in prison after pleading guilty to carrying out a cyberattack on Transport for London in 2024.

The attack disrupted several essential public transport services, including ticketing systems and real-time train information, causing weeks of operational difficulties.

Authorities estimate that the incident resulted in financial losses of approximately 29 million pounds. Investigators revealed that the hackers gained extensive access to Transport for London’s computer systems and had the capability to disable critical infrastructure.

Officials described their level of access as giving them control over some of the organisation’s most sensitive digital systems. According to the U.K. National Crime Agency, the convictions have significantly weakened Scattered Spider, a hacking group linked to several high-profile cyberattacks targeting major organisations, including MGM Resorts, WestJet Airlines, and cybersecurity company Okta.

The group is known for using social engineering techniques to deceive employees rather than relying solely on technical attacks. Authorities also disclosed that Jubair had previously been linked by the FBI to cyberattacks affecting more than 120 companies.

Investigators believe the successful prosecution of both individuals represents an important step in reducing the threat posed by organised cybercrime in the United Kingdom.

Source: TechCrunch