---
title: Teens Behind 2024 TfL Cyber-Attack Were Already on Police Radar
description: Two men convicted for the 2024 TfL cyber-attack, with prior convictions, spotlighting the need for stronger pre-emptive legal measures.
canonical_url: https://codekeeper.co/ticker/tfl-cyber-attack-repeat-offenders
---

# Teens Behind 2024 TfL Cyber-Attack Were Already on Police Radar

Two men convicted for the 2024 TfL cyber-attack, with prior convictions, spotlighting the need for stronger pre-emptive legal measures.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jun 26, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Two young men convicted of the 2024 cyber-attack on Transport for London were repeat offenders well known to law enforcement long before the breach. Owen Flowers, 18, from Walsall, and Thalha Jubair, 20, from east London, pleaded guilty Monday to the attack, which disrupted TfL services for months, exposed data on millions of people and forced all 28,000 TfL staff to reset their passwords in person. The trial heard both were part of Scattered Spider, the loose collective of young English-speaking cyber-criminals also linked to the Marks and Spencer and Co-op attacks. Flowers first caught police attention shortly after turning 16, when officers issued a cease and desist order. Jubair has 22 previous convictions, started offending at 14, and had already received a youth rehabilitation order over Lapsus$-linked attacks on Nvidia and BT/EE. Both are wanted in the US, though the BBC understands American authorities won't pursue Flowers further; Jubair's US case involves alleged theft and extortion of $87m. Sentencing is set for July 16. The National Crime Agency wants new Cyber Crime Risk Orders — proposed under Computer Misuse Act reforms — to let police restrict high-risk offenders before the next breach. **Source:** [BBC News](https://www.bbc.com/news/articles/cx2kx8jr244o)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Ftfl-cyber-attack-repeat-offenders%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Hackers Clone Trusted Websites to Chain Chrome and Windows Zero-Days in Espionage Campaign Sep 23, 2026](https://codekeeper.co/ticker/china-hackers-exploit-chrome-windows-target-governments)

[CISA Warns of Actively Exploited Magento Plugin Flaw Enabling Remote Code Execution Aug 12, 2026](https://codekeeper.co/ticker/cisa-warns-patch-mirasvit-vulnerability-magento)

[Chinese-Funded Interpol Operation Nets 5,800 Arrests and $293M Intercepted Aug 12, 2026](https://codekeeper.co/ticker/global-cybercrime-sweep-interpol-2026)

[Cyberattacks Taiwan Hit by AI-Assisted Cyber-Attack Targeting Government Agencies Aug 17, 2026](https://codekeeper.co/ticker/taiwan-ai-assisted-cyber-attack)