NewsPublished 23 Jun 2026

Scattered Spider members plead guilty to hacking Transport for London

Source Bleeping Computer

Description

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024. [...]

Impact

The attack caused significant operational disruption to TfL's transportation services and customer refund processes. Customer data was stolen, leading to privacy and potential fraud risks. The financial impact on TfL was approximately £29 million. The breach required all employees to reset passwords manually, indicating a widespread compromise of internal credentials. The incident also had reputational consequences for TfL and demonstrated vulnerabilities in critical infrastructure systems.

Defensive guidance

The vendor advisory or source does not mention any official fix or temporary mitigation. Organizations should engage law enforcement promptly when such incidents occur, as TfL did, to aid investigation and response. Password resets for all employees were necessary to contain the breach. Further mitigation would depend on internal TfL security improvements and incident response measures.

References

bleepingcomputer.com/news/security/scattered-spider-members-plead-guilty-to-hacking-transport-for-london/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Jun 2026, 15:39 UTC

References

Community reviews