Two Scattered Spider Members Plead Guilty Over TfL Cyberattack
Two men connected to the notorious Scattered Spider hacking collective have pleaded guilty in a UK court to charges tied to the August 2024 breach of Transport for London, the agency that runs the city's buses, subways, and other public transit infrastructure. The plea came unexpectedly on the very first day of what prosecutors and defense attorneys had prepared to be a lengthy, six-week courtroom battle.
Scattered Spider has built a reputation as one of the more disruptive and technically savvy cybercrime crews in recent years, known for social-engineering attacks that trick help desks and employees into handing over access credentials. The TfL incident forced the agency to shut down or restrict several internal systems, causing weeks of operational headaches even though core transit services managed to keep running.
With the guilty pleas now entered, the case moves toward sentencing rather than a drawn-out trial, sparing the court system the time and expense of hearing weeks of testimony and evidence. It also marks one of the more concrete legal outcomes so far in the ongoing effort by UK and US authorities to identify and prosecute members of the loosely organized but highly effective hacking group.