The UK National Crime Agency (NCA) announced that Transport for London's (TfL) computer network was breached between late August and early September 2024 [1]. Authorities stated that the attack impacted customer services such as Oyster card refunds and forced staff password resets [1]. The NCA identified two defendants as members of the online criminal collective Scattered Spider who have pleaded guilty to related charges [1].
Backfill: this event became public on Sep 5, 2024 and we added it on Nov 8, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
UK National Crime Agency Attributes Transport for London Network Intrusion to Scattered Spider
1 min read
- Disclosed
- Sep 5, 2024
- Occurred
- Aug 31, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government, Transportation & logistics
What to do nowOur advice
The NCA identified two defendants as members of the online criminal collective Scattered Spider who have pleaded guilty to related charges [1].
Timeline
- Public disclosure of incident[1]
Technical details
Source-Supported Details
Financial figures and other case details are subject to the NCA's official statement [1].
Source excerpt for verification: "Jubair and Flowers, who were arrested at their home addresses on 16 September last year by the NCA and COLP, were both members of the online criminal collective known as Scattered Spider." [1].
References
Official / primary1
- [1]
“Jubair and Flowers, who were arrested at their home addresses on 16 September last year by the NCA and COLP, were both members of the online criminal collective known as Scattered Spider.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.