Two teenagers have admitted to carrying out the cyber attack that shut down London's transport network for three days in 2024 and cost Transport for London £39M. But the 10 million passengers whose personal details now circulate among criminals are the ones still paying for it.
Thalha Jubair, 20, from Bow in east London, and Owen Flowers, 18, from Walsall, pleaded guilty at Woolwich Crown Court on 22 June 2026 to conspiring to commit unauthorised acts against TfL's computer systems. They changed their pleas on what was to be the first day of a six-week trial, according to the National Crime Agency.