Two Men Admit Roles in £39m TfL Hack That Crippled Services

Thalha Jubair, 20, and Owen Flowers, 18, entered guilty pleas over the 31 August 2024 cyber attack on Transport for London that disrupted systems for months.

Thalha Jubair, 20, and Owen Flowers, 18, both pleaded guilty to their roles in the hack.
The attack targeted Transport for London systems on 31 August 2024.
The breach caused months of disruption and is estimated to have cost £39 million.
The case is among the most damaging cyber attacks on UK public infrastructure in recent years.

Two men have pleaded guilty over the £39 million cyber attack on Transport for London that knocked out critical systems for months last year.

Thalha Jubair, 20, and Owen Flowers, 18, admitted their roles in the attack, which struck TfL on 31 August 2024, the Wail confirmed.

The breach caused widespread disruption across TfL’s network, affecting passenger services, internal systems, and staff operations over a sustained period.

The attack is among the most costly hits to UK public transport infrastructure on record, with estimated damage reaching £39 million.

Both defendants are due to be sentenced at a later date. No date has been confirmed as of publication.