Snapshot from Aug 07, 2026 at 07:00 UTC. For live data and tracking: View Live
Events / Accidents / TfL hackers sentenced to 5.5 years
Accidents cyberattack sentencing

TfL hackers sentenced to 5.5 years

Analysis based on 29 articles · First reported Jul 16, 2026 · Last updated Jul 18, 2026

Sentiment
-20
Attention
3
Articles
29
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard
Market Impact

The sentencing concludes a high-profile cyberattack case, but the financial damage to TfL and reputational harm to public transport cybersecurity may persist. The case may prompt increased regulatory scrutiny and investment in cybersecurity across UK critical infrastructure.

transportation cybersecurity
Event Summary

On July 16, 2026, UK court sentenced Thalha Jubair (20) and Owen Flowers (18) to 5.5 years in prison for the 2024 cyberattack on United Kingdom — Transport for London (TfL). The attack, linked to Scattered Spider, cost £29 million to fix, exposed data of up to 10 million customers, and disrupted services for months. Flowers also admitted hacking US health systems. The United Kingdom — National Crime Agency called it the UK's largest cyber crime prosecution.

Key Actions
95 Thalha Jubair hacked United Kingdom — Transport for London
95 Owen Flowers hacked United Kingdom — Transport for London
80 Mark Turner sentenced Thalha Jubair
80 Mark Turner sentenced Owen Flowers
80 United Kingdom — National Crime Agency prosecuted hackers Thalha Jubair
80 United Kingdom — National Crime Agency prosecuted hackers Owen Flowers
80 United Kingdom — Transport for London incurred costs
75 Thalha Jubair pleaded guilty
75 Owen Flowers pleaded guilty
70 Owen Flowers hacked United States
60 Owen Flowers arrested during hack
50 Thalha Jubair convicted Nvidia
50 Scattered Spider claimed responsibility
40 Thalha Jubair livestreamed hack
30 Owen Flowers attempted hacks United Kingdom — Crown Prosecution Service
+ 3 more actions View on Dashboard
Entities Involved
govactor
United Kingdom — Transport for London
Victim of the cyberattack; suffered £29 million in damages and operational disruption.
Importance 100.0 Sentiment -30.0
per
Thalha Jubair
Co-perpetrator; sentenced to 5.5 years for hacking TfL and previous Nvidia hack.
Importance 90.0 Sentiment -100.0
per
Owen Flowers
Co-perpetrator; sentenced to 5.5 years for hacking TfL and US health systems.
Importance 90.0 Sentiment -100.0
mil
Scattered Spider
Cybercrime collective linked to the attack; described as a pattern of behavior rather than a defined group.
Importance 70.0 Sentiment -80.0
govactor
United Kingdom — National Crime Agency
Led the investigation; described the case as the largest cyber crime prosecution in the UK.
Importance 60.0 Sentiment 20.0
govactor
United Kingdom — Crown Prosecution Service
Prosecuted the case; Flowers attempted to hack CPS systems from prison.
Importance 50.0 Sentiment 10.0
cnt
United Kingdom
Country where the attack occurred; government developing new cyber legislation.
Importance 40.0 Sentiment -10.0
govactor
United Kingdom — City of London Police
Renewed calls for Cyber Crime Risk Orders to restrict convicted hackers' technology use.
Importance 30.0 Sentiment 10.0
priv
SSM Health
US nonprofit health system hacked by Flowers; suffered data breach.
Importance 30.0 Sentiment -20.0
priv
Sutter Health
US nonprofit health system hacked by Flowers; suffered data breach.
Importance 30.0 Sentiment -20.0
per
Mark Turner
Judge who sentenced the hackers; described their motivation as 'selfish bravado'.
Importance 30.0 Sentiment 0.0
per
Mark Fenhalls
Prosecutor Fenhalls provided details of the attack and the hackers' backgrounds.
Importance 20.0 Sentiment 0.0
cnt
United States
Country where Flowers hacked health systems; not directly affected by TfL attack.
Importance 20.0 Sentiment -10.0
stock
Marks & Spencer
Reportedly also targeted by Scattered Spider; not directly affected by this case.
Importance 20.0 Sentiment -10.0
stock
Nvidia
Previous victim of Jubair's hacking; unrelated to TfL attack.
Importance 20.0 Sentiment -10.0
+ 6 more entities View on Dashboard
Relationships
United Kingdom — National Crime Agency related ↔ United Kingdom — Crown Prosecution Service
United Kingdom — National Crime Agency related ↔ United Kingdom
United Kingdom — Crown Prosecution Service related ↔ United Kingdom
United Kingdom related ↔ United Kingdom — City of London Police
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.