Two Teen Hackers Sentenced to Prison for Major Transport System Attack

Thalha Jubair and Owen Flowers were prosecuted and sentenced to prison over a 2024 cyberattack targeting Transport for London (TfL). The attack disrupted the organization that manages London's public transportation system, including buses, trains, and the Underground. This case demonstrates that law enforcement agencies are successfully tracking down and prosecuting cybercriminals, even young offenders. This case affects families in two important ways. First, if you or family members live in or visited London and used their transport systems during or after the 2024 attack, your payment information or travel data may have been part of the compromised systems. Second, this prosecution sends a clear message that cybercrime, even when committed by young people, results in serious criminal consequences including significant prison time.

If you used Transport for London services in 2024 or 2025, check your bank and credit card statements for any unauthorized charges. Monitor your accounts for unusual activity. If you created an online account with TfL, change your password immediately if you have not already done so since

2024. Use a unique password that you do not use anywhere else. Enable two-factor authentication if the service offers it. Use this case as a teaching moment with young people in your life. Hacking is not a harmless prank or clever trick. It is a crime that results in prison sentences and criminal records. Talk to kids and teens about making good choices online and understanding that actions in the digital world have real legal consequences. Encourage them to use their technical skills for positive purposes like learning cybersecurity to protect systems rather than attack them.