Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack

The article reports that two alleged members of the Scattered Spider cybercrime group were sentenced in the UK for a 2024 cyberattack on Transport for London that disrupted services (including Dial-a-Ride and ticketing), exposed customer data from the Oyster refunds system, forced system-wide password resets for 27,000 employees and took 148 systems offline, and cost TfL an estimated £29 million; the report also summarizes additional arrests, extraditions, and prosecutions of individuals linked to Scattered Spider and notes that law enforcement action materially degraded the group's capabilities.