:

LONDON TRANSPORT HACKERS JAILED FOR £39M CYBER-ATTACK

AI DESK1 MIN READ
THU, JUL 16, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Two teenagers have been sentenced to five and a half years each for breaking into Transport for London's core IT systems in 2024. The breach exposed data belonging to millions of commuters and forced 27,000 TfL staff to reset passwords.

Thalha Jubair, 20, and Owen Flowers, 19, gained access to what prosecutors described as the "keys to the kingdom" of London's transport infrastructure during a four-day attack. The cyber-attack resulted in £39 million in losses for TfL. Beyond the financial damage, commuters had their personal information compromised while the disruption forced the entire workforce to undergo security resets. The case highlights vulnerabilities in critical infrastructure systems and marks a significant enforcement action against cyber-criminals targeting essential services. Both hackers were convicted following investigation by authorities who traced the breach to the pair's unauthorized access of central systems. The sentences underscore the serious consequences of attacking national infrastructure, with courts treating such offenses with severity despite the defendants' age at the time of the breach.

■ SOURCES

The Guardian — Technology

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Mozilla research found that period tracker Stardust shares users' health data with an analytics company, revealing significant privacy gaps among menstrual health apps. The findings highlight inconsistent data protection practices across the category.

1H AGOIndustry Desk

Genetic testing company 23andMe has agreed to an $18 million settlement with 43 state attorneys general over failure to protect customer genetic data.

3H AGOSecurity Desk

Traditional security workflows designed for human-speed operations are inadequate for AI agents, requiring organizations to rebuild defenses around live identity foundations and customizable threat responses.

3H AGOAI Desk

Two members of the Scattered Spider cybercrime collective have been sentenced to five years and six months in prison each for a 2024 cyberattack that disrupted Transport for London.

5H AGOAI Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.