Thalha Jubair and Owen Flowers Scattered Spider arrests and charges
Law Enforcement
Summary
Hide ▲
Show ▼
Scattered Spider members Thalha Jubair and Owen Flowers pleaded guilty in the United Kingdom over the August 2024 cyberattack that crippled Transport for London. The case remains part of a broader law-enforcement action tied to the group’s U.K. arrests, U.S. complaints, and related cybercrime allegations.
Related Happenings
Transport for London (TfL) customer data exposed after Transport for London (TfL) breach
Data Leak
H score46
First: 23.06.2026 18:31
Last: 23.06.2026 18:31
Sources 1
How related:
On September 12, TfL admitted that customer data had been stolen in the attack, while the U.K.’s National Crime Agency (NCA) announced on the same day the arrest of Flowers, a suspect at the time.
About this happening:
The **Transport for London (TfL)** intrusion became a confirmed **data leak** after **customer data** was stolen from the **Oyster refunds system**, raising misuse risk for affect...
Transport for London (TfL) customer data exposed after Transport for London (TfL) breach
Data LeakHow related: On September 12, TfL admitted that customer data had been stolen in the attack, while the U.K.’s National Crime Agency (NCA) announced on the same day the arrest of Flowers, a suspect at the time.
About this happening: The **Transport for London (TfL)** intrusion became a confirmed **data leak** after **customer data** was stolen from the **Oyster refunds system**, raising misuse risk for affect...
Dubai Police international crypto scam-center crackdown
Law Enforcement
H score36
First: 30.04.2026 14:21
Last: 30.04.2026 14:21
Sources 1
About this happening:
Authorities **arrested at least 276 suspects** and **shut down nine cryptocurrency investment fraud centers**, disrupting a cross-border fraud network tied to **pig-butchering sch...
Dubai Police international crypto scam-center crackdown
Law EnforcementAbout this happening: Authorities **arrested at least 276 suspects** and **shut down nine cryptocurrency investment fraud centers**, disrupting a cross-border fraud network tied to **pig-butchering sch...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law Enforcement
H score45
First: 28.04.2026 18:39
Last: 28.04.2026 18:39
Sources 1
About this happening:
**Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law EnforcementAbout this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law Enforcement
H score57
First: 27.04.2026 22:56
Last: 27.04.2026 22:56
Sources 1
About this happening:
**Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law EnforcementAbout this happening: **Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law Enforcement
H score26
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
**Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law EnforcementAbout this happening: **Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Timeline
-
19.09.2025 10:05 4 articles · 9mo ago
Jubair devices seized and RIPA charge filed
Legal Policy Action UpdateLaw enforcement seized devices from Thalha Jubair on March 19, 2025, and he was charged under the Regulation of Investigatory Powers Act (RIPA) 2000 for failing to surrender PINs and passwords for the seized devices.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- Scattered Spider Teens Convicted of TfL Cyber-Attack — www.infosecurity-magazine.com — 23.06.2026 12:29
- Scattered Spider members plead guilty to hacking Transport for London — www.bleepingcomputer.com — 23.06.2026 18:31
- Scattered Spider Hackers Plead Guilty on Day 1 of Trial — krebsonsecurity.com — 23.06.2026 19:12
-
19.09.2025 10:05 3 articles · 9mo ago
U.K. arrests and U.S. complaint expand the Scattered Spider case
Initial DisclosureOn September 19, 2025, the National Crime Agency said it arrested Thalha Jubair and Owen Flowers at their home addresses in the U.K. in connection with the August 2024 Transport for London cyber attack, while the U.S. Department of Justice unsealed a complaint accusing Jubair of computer fraud, wire fraud, and money laundering tied to at least 120 computer network intrusions, 47 U.S. entities, and at least $115,000,000 in ransom payments. The filing also says Flowers was linked to U.S. healthcare targets and charged in connection with SSM Health Care Corporation and Sutter Health.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms — krebsonsecurity.com — 24.09.2025 14:48