Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack

Two leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months for a 2024 attack on Transport for London that disrupted services, exposed customer data, forced organization-wide password resets and cost TfL £29 million; investigators linked the group to social engineering, SIM-swapping and credential theft, noted broader ransomware/extortion activity, and reported that arrests materially degraded the group's capabilities.