TfL Hackers Plead Guilty After Breach Exposed Customer Data and Cost £29 Million

Two alleged members of the Scattered Spider cybercrime collective pleaded guilty to their roles in a Transport for London breach that infiltrated TfL systems between 31 Aug and 3 Sep 2024, forced 28,000 employees to reset passwords, exposed Oyster refunds data, disrupted services (including photocard processing), and caused approximately £29 million in losses and recovery costs; law enforcement recovered devices and evidence linking the suspects to the intrusion and to alleged attempts against US healthcare networks.