Scattered Spider members are sentenced for the Transport for London attack

Two teenage members of the Scattered Spider cybercrime group were sentenced in the UK to five years and six months in prison each for the 2024 cyberattack on Transport for London. The case drew major attention because the attackers used social engineering to impersonate an employee and trick a help-desk worker into resetting an account, then pushed deeper into TfL's systems. Reports described the incident as one of the UK's largest cybercrime cases, with estimated costs to TfL around £29 million. The attack disrupted services and raised fears that the thieves had reached the 'keys to the kingdom' inside critical transport infrastructure. This matters because it shows how identity compromise and help-desk manipulation can be as damaging as malware or exploits. The sentencing is also a reminder that law enforcement is still catching up with highly social-engineering-focused groups.

Sources

• Scattered Spider duo sentenced to prison over TfL hack — Intel 471 (SpiderFoot)
• Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack — Security Affairs
• Scattered Spider members jailed over Transport for London hack that cost £29 million — Help Net Security
• Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack — The Record — Cybercrime