Two Britons plead guilty to £39m 2024 cyber-attack on Transport for London

The BBC has reported that 10 million TfL customers had their data stolen in the cyber-attack. Photograph: Andy Rain/EPA

Two British cybercriminals from the Scattered Spider hacking group have pleaded guilty to a cyber-attack on Transport for London in 2024 that cost £39m and affected 10 million people.

Thalha Jubair, 20, and Owen Flowers, 18, pleaded guilty to offences under the Computer Misuse Act at Woolwich crown court on Monday.