Thalha Jubair and Owen Flowers Scattered Spider arrests and charges
Law Enforcement
Summary
Hide ▲
Show ▼
Scattered Spider members Thalha Jubair and Owen Flowers pleaded guilty in the United Kingdom over the August 2024 cyberattack that crippled Transport for London. The case remains part of a broader law-enforcement action tied to the group’s U.K. arrests, U.S. complaints, and related cybercrime allegations.
Related Happenings
Transport for London (TfL) customer data exposed after Transport for London (TfL) breach
Data Leak
H score46
First: 23.06.2026 18:31
Last: 23.06.2026 18:31
Sources 1
How related:
On September 12, TfL admitted that customer data had been stolen in the attack, while the U.K.’s National Crime Agency (NCA) announced on the same day the arrest of Flowers, a suspect at the time.
About this happening:
The Transport for London (TfL) intrusion became a confirmed data leak after customer data was stolen from the Oyster refunds system, raising misuse risk for affect...
Transport for London (TfL) customer data exposed after Transport for London (TfL) breach
Data LeakHow related: On September 12, TfL admitted that customer data had been stolen in the attack, while the U.K.’s National Crime Agency (NCA) announced on the same day the arrest of Flowers, a suspect at the time.
About this happening: The Transport for London (TfL) intrusion became a confirmed data leak after customer data was stolen from the Oyster refunds system, raising misuse risk for affect...
Dubai Police international crypto scam-center crackdown
Law Enforcement
H score36
First: 30.04.2026 14:21
Last: 30.04.2026 14:21
Sources 1
About this happening:
Authorities arrested at least 276 suspects and shut down nine cryptocurrency investment fraud centers, disrupting a cross-border fraud network tied to pig-butchering sch...
Dubai Police international crypto scam-center crackdown
Law EnforcementAbout this happening: Authorities arrested at least 276 suspects and shut down nine cryptocurrency investment fraud centers, disrupting a cross-border fraud network tied to pig-butchering sch...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law Enforcement
H score45
First: 28.04.2026 18:39
Last: 28.04.2026 18:39
Sources 1
About this happening:
Finnish law enforcement arrested Bouquet, and U.S. federal prosecutors later charged him in a cross-border Scattered Spider cybercrime case. The charges include ...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law EnforcementAbout this happening: Finnish law enforcement arrested Bouquet, and U.S. federal prosecutors later charged him in a cross-border Scattered Spider cybercrime case. The charges include ...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law Enforcement
H score57
First: 27.04.2026 22:56
Last: 27.04.2026 22:56
Sources 1
About this happening:
Xu Zewei was extradited from Italy to the United States to face criminal charges in a cyberespionage case tied to China's MSS. The move expands the legal exposure...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law EnforcementAbout this happening: Xu Zewei was extradited from Italy to the United States to face criminal charges in a cyberespionage case tied to China's MSS. The move expands the legal exposure...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law Enforcement
H score26
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
Tyler Robert Buchanan pleaded guilty in the United States in a Scattered Spider cybercrime case, increasing his criminal exposure for wire fraud and aggravat...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law EnforcementAbout this happening: Tyler Robert Buchanan pleaded guilty in the United States in a Scattered Spider cybercrime case, increasing his criminal exposure for wire fraud and aggravat...
Timeline
-
19.09.2025 10:05 4 articles · 9mo ago
Jubair devices seized and RIPA charge filed
Legal Policy Action UpdateLaw enforcement seized devices from Thalha Jubair on March 19, 2025, and he was charged under the Regulation of Investigatory Powers Act (RIPA) 2000 for failing to surrender PINs and passwords for the seized devices.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- Scattered Spider Teens Convicted of TfL Cyber-Attack — www.infosecurity-magazine.com — 23.06.2026 12:29
- Scattered Spider members plead guilty to hacking Transport for London — www.bleepingcomputer.com — 23.06.2026 18:31
- Scattered Spider Hackers Plead Guilty on Day 1 of Trial — krebsonsecurity.com — 23.06.2026 19:12
-
19.09.2025 10:05 3 articles · 9mo ago
U.K. arrests and U.S. complaint expand the Scattered Spider case
Initial DisclosureOn September 19, 2025, the National Crime Agency said it arrested Thalha Jubair and Owen Flowers at their home addresses in the U.K. in connection with the August 2024 Transport for London cyber attack, while the U.S. Department of Justice unsealed a complaint accusing Jubair of computer fraud, wire fraud, and money laundering tied to at least 120 computer network intrusions, 47 U.S. entities, and at least $115,000,000 in ransom payments. The filing also says Flowers was linked to U.S. healthcare targets and charged in connection with SSM Health Care Corporation and Sutter Health.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms — krebsonsecurity.com — 24.09.2025 14:48