UK Authorities Crack Down on Scattered Spider with 66-Month Jail Sentences for Leading Members
In a significant blow to the notorious cybercrime collective Scattered Spider, two of its leading members have been sentenced to 66 months in jail by UK authorities. Thalha Jubair and Owen Flowers, both young men in their late teens and early twenties, were arrested last year and pleaded guilty to participating in the group’s devastating cyberattack on Transport for London (TfL) in 2024.
The attack brought TfL’s operations to a standstill, causing widespread disruption to commuters and the city’s economy. Jubair and Flowers were identified as core members of Scattered Spider, a subgroup of The Com, a larger hacking collective. They were accused of participating in at least 120 cyberattacks worldwide, including extortion of 47 US-based organizations and a January 2025 attack on the federal court system.
According to researchers, Scattered Spider’s modus operandi involves data extortion, SIM-swap attacks, and social engineering techniques to infiltrate networks and undermine critical services. The group’s members have been known to reinvest victim payments back into their enterprise, making them a financially motivated threat. US authorities had previously accused Jubair of direct involvement in these cyberattacks, including the January 2025 attack on the federal court system.
The sentencing of Jubair and Flowers marks a significant step forward for UK authorities in holding accountable key members of Scattered Spider. However, experts warn that other hackers continue to use the group’s brand name in more recent attacks. Allison Nixon, chief research officer at Unit 221B, notes that the punishment is “remarkably lenient considering the period of continuous reoffending lasted longer than the sentence.” She hopes that the US will eventually extradite the pair to face additional charges.
The case highlights the ongoing threat posed by cybercrime collectives like Scattered Spider. These groups often operate with significant resources and support, making them a formidable challenge for law enforcement agencies. As Nixon points out, “no one who worked on their case was surprised they would reoffend” – emphasizing the need for more effective measures to prevent recidivism in cybercrime.
For individuals and organizations, this case serves as a reminder of the importance of robust cybersecurity measures and timely incident response. While authorities continue to crack down on cybercrime collectives like Scattered Spider, it’s essential for businesses and individuals to remain vigilant against the evolving threat landscape. As Brett Leatherman, assistant director of the FBI Cyber Division, notes in a statement, “members of Scattered Spider continue to victimize organizations around the world and cause significant financial and operational harm.”
Source: CyberScoop — 2026-07-17