The article reports that two teenage hackers linked to the Scattered Spider cybercrime community were behind the 2024 cyber attack on Transport for London, which later led to guilty pleas in court. According to the report, they also targeted celebrity-related information as part of the breach, adding a more intrusive and high-profile dimension to an already serious attack on public infrastructure. The case matters because it shows how relatively young offenders were able to cause major disruption, financial damage and concern over personal data at one of Britain’s most important transport networks.

The attack took place between late August and early September 2024 and is said to have cost TfL about £39 million. It disrupted online services including live travel information and Oyster-related systems, while customer data was exposed, with reports that around 5,000 people had sensitive details such as bank information compromised and millions more were warned that some data may have been accessed. The defendants, aged 20 and 18 at the time of the later court proceedings, were reported to have used social engineering techniques, and the case has been presented as part of a wider pattern of increasingly sophisticated youth-led cybercrime.