Two Scattered Spider Hackers Jailed in UK’s Largest Cybercrime Prosecution

### Executive summary The report details a late-2024 intrusion by alleged Scattered Spider members that disrupted Transport for London’s corporate systems and public services (148 systems impacted, ~27,000 employees forced to reset credentials), caused an estimated £29M in direct losses and recovery costs, and involved access to customer refund data; two suspects were arrested, pleaded guilty, and were sentenced. The case highlights identity-focused techniques (social engineering, SIM swapping), cross-border investigative activity, and proposed legal measures to restrict offender device and service use.