Two Scattered Spider members plead guilty over cyberattack that crippled London transit

Two members of the Scattered Spider cybercrime group pleaded guilty to a September 2024 intrusion of Transport for London that disrupted services for months, exposed Oyster refund and concession data, forced 28,000 employees to reset passwords in person, and generated approximately £29 million in losses and recovery costs; seized devices and communications provided direct evidence of the intrusion and suggested links to other high-profile breaches.