Two individuals linked to the notorious Scattered Spider cybercrime syndicate have been sentenced to prison in the United Kingdom, according to an announcement by the National Crime Agency (NCA) on Thursday. This marks a significant legal victory against cybercriminal activities in the country.
Details of the Cyberattack
Thalha Jubair, aged 20, and Owen Flowers, aged 18, faced charges related to their involvement in a 2024 cyberattack that targeted Transport for London (TfL). The attack led to extensive disruptions, incurring losses estimated at £29 million ($39 million). Initially arrested in September 2025, both defendants had pleaded not guilty but changed their pleas as their trial commenced in June.
The court sentenced both Jubair and Flowers to five years and six months in prison. This case has been described by officials as “the largest cybercrime prosecution ever brought before the UK courts.”
Impact on Scattered Spider Operations
Despite multiple arrests in the previous year, the Scattered Spider group continued to claim responsibility for a series of cyberattacks into early 2026. However, recent months have seen a decline in such activities. The NCA asserts that their actions against Jubair and Flowers have effectively disrupted the group’s operations.
Microsoft corroborated this view, noting that the arrests significantly impaired the group’s ability to conduct further cyberattacks. This development has been crucial in the fight against this cybercrime faction.
Ongoing Legal Proceedings
In addition to these sentences, authorities continue to pursue other alleged members of the Scattered Spider group. Among them, 19-year-old Peter Stokes, a dual US-Estonian citizen, has been extradited to the United States to face charges.
Moreover, Tyler Buchanan, a British national, has already pleaded guilty in a US court back in April, further showcasing the international scope of actions against this cybercrime network.
This case highlights the ongoing efforts by law enforcement agencies to bring cybercriminals to justice and underscores the importance of international cooperation in tackling cyber threats.
