Two teenagers have pleaded not guilty in connection with a cyber attack on Transport for London which cost millions of pounds.
Investigators believe the “network intrusion” in summer 2024 was carried out by the online criminal group known as Scattered Spider.
Thalha Jubair, 19, from east London, and Owen Flowers, 18, from Walsall in the West Midlands, were arrested at their homes in September.
They were detained as part of an operation by officers from the National Crime Agency (NCA) and City of London Police.
Both have appeared before Southwark Crown Court and entered not guilty pleas to charges of conspiring together to commit unauthorised acts against Transport for London (TfL).
They stood in the dock together and spoke only to confirm their names and enter not guilty pleas.
Flowers and Jubair are both charged with conspiring to commit unauthorised acts against computer systems belonging to TfL between 29 August and 6 September 2024.
As part of that charge they are accused of “causing, or creating a significant risk of, serious damage to human welfare and intending to cause such damage or being reckless as to whether such damage was caused.”
Flowers, who wore a black t-shirt and a grey jumper around his shoulders, is also accused of unauthorised acts against computer systems belonging to SSM Health and attempting to commit unauthorised acts against computer systems belonging to Sutter Health.
Jubair, who appeared in the dock wearing a grey suit, is accused of failing to disclose the pin or passwords seized from him on 19 March 2025.
A provisional trial date has been set for 8 June 2026 at Southwark Crown Court, with a pre-trial hearing on 13 February.
TfL was targeted on 31 August 2024 by attackers who accessed customer data including names and contact details.
The cyber incident did not cause any wider disruption to transport networks but has cost the operators millions of pounds in losses and recovery.
At the time TfL described the attack…
