"Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed

The report describes a 2024 cyber-attack on Transport for London by two young men tied to the Scattered Spider collective who used social engineering, SIM-related techniques and repeated 2FA resets to gain persistent access to TfL systems, exposing Oyster card data and disrupting services; the intrusion affected millions, caused tens of millions of pounds in losses, and resulted in lengthy prison sentences, with authorities characterizing Scattered Spider as a significant organized cybercrime threat.