UK Teens Charged in Connection to Scattered Spider Ransomware Attacks
LONDON – Two UK teenagers have been charged in connection with a series of ransomware attacks attributed to the Scattered Spider hacking group, impacting dozens of companies in the US and including a significant breach of LondonS public transit system.
Thalha Jubair, 19, of London, faces charges in the US District Court of the District of New Jersey related to conspiracy to commit computer fraud and other crimes stemming from intrusions targeting 47 US companies over three years, resulting in over $115 million in ransomware payments, according to a criminal complaint unsealed Thursday. Jubair is alleged to be a member of Scattered Spider, a group known for breaching networks, stealing data, and demanding ransoms for its return or threatening public release.
Owen Flowers, 18, from walsall, West Midlands, has also been charged by UK prosecutors in connection with the september 2024 cyberattack on transport for London (TfL), wich caused significant disruption and a monthslong recovery effort.
Both Jubair and Flowers were arrested at their homes on Thursday and appeared at Westminster Magistrates Court,where they were remanded to appear in Crown Court on October 16,the National Crime Agency (NCA) said. Flowers was previously arrested in September 2024 regarding the tfl attack and later released.
Prosecutors with the NCA stated that Flowers and other conspirators were also responsible for a cyberattack on SSM Health Care and an attempted breach of Sutter health, both US-based healthcare organizations.Jubair faces additional charges related to refusing to provide PIN codes and passwords for devices seized during his arrest.
The unsealed US complaint details the group’s tactics and the financial impact of their attacks. Authorities have reportedly recovered Bitcoin paid by victims as part of the inquiry.
