Two Scattered Spider hackers plead guilty over Transport for London cyberattack

Two members of the hacker group Scattered Spider pleaded guilty for a 2024 cyberattack on Transport for London that targeted TfL’s network and Oyster refund systems between 31 August and 3 September 2024, causing £29 million in loss and recovery costs, disrupting customer refund processes and the Oyster photocard application, and forcing mass password resets for 28,000 employees; investigators seized devices, found evidence (screenshots, videos) of access, documented communications via Telegram and an online collaboration platform, and linked one suspect to intrusions against U.S. healthcare providers.