Thalha Jubair and Owen Flowers Scattered Spider arrests and charges
Law Enforcement
Summary
Hide ▲
Show ▼
The U.K. National Crime Agency arrested Thalha Jubair and Owen Flowers in connection with the August 2024 Transport for London cyberattack, while the U.S. Department of Justice unsealed a complaint accusing Jubair of computer fraud, wire fraud, and money laundering tied to Scattered Spider. Prosecutors say the case spans at least 120 intrusions, 47 U.S. entities, and at least $115,000,000 in ransom payments, and it also includes allegations tied to U.S. healthcare targets and a separate RIPA 2000 device-password charge.
Related Happenings
Dubai Police international crypto scam-center crackdown
Law Enforcement
First: 30.04.2026 14:21
Last: 30.04.2026 14:21
Sources 1
About this happening:
Authorities **arrested at least 276 suspects** and **shut down nine cryptocurrency investment fraud centers**, disrupting a cross-border fraud network tied to **pig-butchering sch...
Dubai Police international crypto scam-center crackdown
Law EnforcementAbout this happening: Authorities **arrested at least 276 suspects** and **shut down nine cryptocurrency investment fraud centers**, disrupting a cross-border fraud network tied to **pig-butchering sch...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law Enforcement
First: 28.04.2026 18:39
Last: 28.04.2026 18:39
Sources 1
About this happening:
**Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law EnforcementAbout this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law Enforcement
First: 27.04.2026 22:56
Last: 27.04.2026 22:56
Sources 1
About this happening:
**Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Xu Zewei extradited for U.S. cyberespionage prosecution
Law EnforcementAbout this happening: **Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law Enforcement
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
**Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law EnforcementAbout this happening: **Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
How related:
Beginning in 2022, EarthtoStar co-ran a bustling Telegram channel called Star Chat, which was home to a prolific SIM-swapping group that relentlessly used voice- and SMS-based phishing attacks to steal credentials from employees at the major wireless providers in the U.S. and U.K.
About this happening:
The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignHow related: Beginning in 2022, EarthtoStar co-ran a bustling Telegram channel called Star Chat, which was home to a prolific SIM-swapping group that relentlessly used voice- and SMS-based phishing attacks to steal credentials from employees at the major wireless providers in the U.S. and U.K.
About this happening: The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Timeline
-
19.09.2025 10:05 1 articles · 8mo ago
Jubair devices seized and RIPA charge filed
Legal Policy Action UpdateLaw enforcement seized devices from Thalha Jubair on March 19, 2025, and he was charged under the Regulation of Investigatory Powers Act (RIPA) 2000 for failing to surrender PINs and passwords for the seized devices.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
-
19.09.2025 10:05 3 articles · 8mo ago
U.K. arrests and U.S. complaint expand the Scattered Spider case
Initial DisclosureOn September 19, 2025, the National Crime Agency said it arrested Thalha Jubair and Owen Flowers at their home addresses in the U.K. in connection with the August 2024 Transport for London cyber attack, while the U.S. Department of Justice unsealed a complaint accusing Jubair of computer fraud, wire fraud, and money laundering tied to at least 120 computer network intrusions, 47 U.S. entities, and at least $115,000,000 in ransom payments. The filing also says Flowers was linked to U.S. healthcare targets and charged in connection with SSM Health Care Corporation and Sutter Health.
Show sources
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack — thehackernews.com — 19.09.2025 10:05
- Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms — krebsonsecurity.com — 24.09.2025 14:48