Scattered Spider Teens Convicted of TfL Cyber-Attack

Two British youths with alleged ties to the Scattered Spider collective pleaded guilty to hacking Transport for London between 31 August and 3 September 2024; the attack reportedly caused around £29m in loss and recovery costs, disrupted customer refund and Oyster photocard systems, and required mass password resets for 28,000 employees. Authorities say one defendant is alleged to have participated in at least 120 intrusions and extortion affecting 47 US entities, with victims paying $115m or more in ransom; both pleaded guilty on 22 June and await sentencing.