Transport for London
Transport for London (TfL) is the local government body responsible for London's transport network.
Last refreshed: 24 July 2026 · Appears in 1 active topic
TfL's 2024 breach hit 10 million passengers, so why did it take until July 2026 for anyone to be jailed?
Timeline for Transport for London
TfL hackers jailed five and a half years
Cybersecurity: Threats and DefencesPolice press for a 'digital prison'
Cybersecurity: Threats and DefencesBackground
Transport for London (TfL) was the victim of the September 2024 cyber attack for which two Scattered Spider members, Owen Flowers and Thalha Jubair, were jailed at Woolwich Crown Court on 16 July 2026, in what the National Crime Agency called Britain's largest-ever cybercrime prosecution.
TfL is the local government body running London's buses, Underground and road network. The 2024 attack disabled 148 systems and exposed data on roughly 10 million passengers, costing an estimated £29 million; the NCA put the potential hit to the UK economy at £56 billion had the network been shut entirely.
The case became a platform for City of London Police to press for new Cyber Crime Risk Orders, restricting convicted hackers' access to technology after release.