Two Teen Hackers Sentenced to Prison for Major Transport System Attack

Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years in prison on July 16, 2026, for hacking Transport for London in

2024. The attack severely disrupted the organization that runs London's buses, trains, and underground system. The hackers took down 148 computer systems and forced all 27,000 TfL employees to come into an office in person to get their passwords reset for security reasons. This case affects families in two important ways. First, if you or family members live in or visited London and used their transport systems during or after the 2024 attack, your payment information or travel data may have been part of the compromised systems. Second, this sentencing sends a clear message that cybercrime, even when committed by teenagers, results in serious prison time. The significant prison sentences show that authorities are treating cyberattacks as serious crimes with real-world consequences. If you used Transport for London services in 2024 or 2025, check your bank and credit card statements for any unauthorized charges. Monitor your accounts for unusual activity. If you created an online account with TfL, change your password immediately if you have not already done so since
2025. Use a unique password that you do not use anywhere else. Enable two-factor authentication if the service offers it. Use this case as a teaching moment with young people in your life. Hacking is not a harmless prank or clever trick. It is a crime that results in prison sentences and ruins lives. The two convicted hackers were teenagers when they committed these crimes, and now face years in prison during what should be important formative years of their lives. Talk to kids and teens about making good choices online and understanding that actions in the digital world have real legal consequences.