Scattered Spider Leaders Face Justice
Thalha Jubair and Owen Flowers, two young men and leading members of the Scattered Spider hacker group, have been sentenced to 66 months in jail for committing a cyberattack on Transport for London in 2024. The attack brought the network's operations to a standstill, causing significant disruption.
Jubair and Flowers were arrested at their homes in September 2025 and pleaded guilty last month, just as their trials were set to begin. Flowers had previously been arrested in connection with the attack in September 2024 but was released after questioning by officers.
Scattered Spider's Notorious Activities
According to researchers, Jubair and Flowers were highly involved in Scattered Spider, a nebulous hacker subset of The Com. The 20-year-old Jubair was a prolific cybercriminal and core member of the unbound collective. U.S. authorities accused Jubair of direct, prominent involvement in at least 120 cyberattacks, including extortion of 47 U.S.-based organizations and the January 2025 attack on the federal court system.
Officials traced a combined total of at least $89.5 million in cryptocurrency to Bitcoin addresses and servers controlled by Jubair. Two financial services firms paid Jubair $25 million and $36.2 million, respectively, in Bitcoin between June and November 2023.
Lasting Impact and Ongoing Threat
The lasting impact of Jubair and Flowers' capture and imprisonment remains unclear. U.K. authorities insist that their arrests and punishment have effectively halted the group's criminal activity. However, they also acknowledge that other cybercriminals continue to use the Scattered Spider brand in more recent attacks.
Brett Leatherman, assistant director of the FBI Cyber Division, stated that Thursday's announcement represents a significant step in holding accountable two members of Scattered Spider, a group that has repeatedly relied on data extortion, SIM-swap attacks, and other social engineering techniques to infiltrate networks and undermine critical services.
The FBI also noted that members of Scattered Spider continue to victimize organizations around the world and cause significant financial and operational harm. When Owens, now 18, was first arrested for the Transport for London attack in 2024, investigators said he was in the process of hacking the systems of U.S. health care companies SSM Health Care Corporation and Sutter Health.
Reaction and Criticism
Despite the upbeat reaction from U.K. officials, Allison Nixon, chief research officer at Unit 221B, said that the punishment for Jubair and Flowers is remarkably lenient considering the period of continuous reoffending lasted longer than the sentence. Nixon hopes that the United States will eventually extradite the pair to face additional charges.
Nixon added that if that happens, they won't be able to use mental illness as a loophole to get back to harming society as soon as possible. No one who worked on their case was surprised they would reoffend, and there seems to be no allowance in the law to protect the public from what everyone knew was going to happen.
Paul Foster, head of the National Crime Center's National Cybercrime Unit, stated that this is the largest cybercrime prosecution ever brought before the U.K. courts and the culmination of nearly two years of painstaking work. Foster added that Scattered Spider has been the most significant cybercrime threat to the U.K. in recent years and that through this investigation, they have severely disrupted that threat and brought key offenders to justice.
Source: CyberScoop