Two teenagers, Thalha Jubair (20) and Owen Flowers (19), have been jailed for five and a half years following a 2024 cyber-attack on Transport for London that compromised critical IT systems. The breach, which granted the pair extensive unauthorized access to TfL's digital infrastructure, resulted in an estimated £39m in damages and was described in court as providing the attackers with "the keys to the kingdom" to the transport authority's network.

The duo conducted their 16-hour breach while livestreaming their activities online, exploiting vulnerabilities in TfL's domain systems. Both were characterised during sentencing as computer-focused teenagers with autism who had limited social connections outside their technical interests, highlighting how skilled threat actors operating independently of organised crime networks can inflict substantial damage on critical infrastructure.