Experienced´ TfL hackers could have caused 'catastrophic damage´,...

Experienced TfL hackers could have caused “catastrophic damage,” a case heard at Woolwich Crown Court detailed costs and impact from a multi-day cyberattack. Prosecutors told the court that Thalha Jubair, 20, and Owen Flowers, 18, forced Transport for London (TfL) to “pull the plug” on its systems after an intrusion that began between August 31 and September 3, 2024. The disruption cost TfL £29 million in damages and operational work, and TfL also claimed a further £10 million in lost income. More than 27,000 employees were reportedly required to attend an office to reset passwords. The prosecution said data from the Oyster refund system was accessed, contactless services were delayed, and applications for Oyster photo cards for children and young people were closed. The National Crime Agency linked the defendants’ group, Scattered Spider, to attacks including on Jaguar Land Rover and Marks & Spencer.