Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

## Executive summary Scattered Spider conducted a 2024 social-engineering-driven intrusion against Transport for London that led to 148 systems being knocked offline, significant operational disruption for staff and passengers, an estimated £29M in recovery costs, and criminal prosecutions of group members; the report highlights social engineering as the primary initial access vector and recommends identity verification, zero-trust segmentation, and incident response readiness.