:

LONDON TRANSPORT HACKERS JAILED FOR £39M CYBER-ATTACK

AI DESK1 MIN READ
THU, JUL 16, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Two teenagers have been sentenced to five and a half years each for breaking into Transport for London's core IT systems in 2024. The breach exposed data belonging to millions of commuters and forced 27,000 TfL staff to reset passwords.

Thalha Jubair, 20, and Owen Flowers, 19, gained access to what prosecutors described as the "keys to the kingdom" of London's transport infrastructure during a four-day attack. The cyber-attack resulted in £39 million in losses for TfL. Beyond the financial damage, commuters had their personal information compromised while the disruption forced the entire workforce to undergo security resets. The case highlights vulnerabilities in critical infrastructure systems and marks a significant enforcement action against cyber-criminals targeting essential services. Both hackers were convicted following investigation by authorities who traced the breach to the pair's unauthorized access of central systems. The sentences underscore the serious consequences of attacking national infrastructure, with courts treating such offenses with severity despite the defendants' age at the time of the breach.

■ SOURCES

The Guardian — Technology

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A massive data breach at an unspecified car rental company exposed customer driver's licenses and personal information within hours of rental. The FBI is investigating the incident as data stolen from customers appears for sale online.

5H AGOIndustry Desk

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin exposes WordPress sites to remote code execution and complete takeover by unauthenticated attackers.

8H AGOIndustry Desk

An identity theft search site claimed to possess over 150 million driver's license photos stolen from a major ID verification service. The crime site has since been shut down.

8H AGOSecurity Desk

Iran-linked hackers have compromised approximately 100 American water utilities in a sustained campaign targeting critical infrastructure. The EPA is allocating $11 million in funding to strengthen cybersecurity defenses across water systems.

11H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.