Brit Scattered Spider duo handed tickets to prison over Transport for London attack

Two members of the criminal group Scattered Spider were sentenced for a 2024 cyberattack on Transport for London that used purchased credentials, social engineering and 2FA resets to gain access; the intrusion exposed around 7 million users' data, disrupted customer services, incurred approximately £29 million in remediation costs, and was linked by forensic evidence to livestreamed activity and cloud/cryptocurrency artifacts.