SCATTERED SPIDER MEMBERS JAILED FOR TFL HACK

AI DESK■ 1 MIN READ

THU, JUL 16, 2026

■ AI-SUMMARIZED FROM 3 SOURCES ▸ TIMELINE

Two members of the Scattered Spider cybercrime collective have been sentenced to five years and six months in prison each for a 2024 cyberattack that disrupted Transport for London.

The two men, who carried out the attack as teenagers, pleaded guilty in UK courts to their role in the August 2024 breach. The cyberattack significantly impacted TfL operations, affecting millions of commuters in London. Scattered Spider is a known cybercrime group operating internationally. The sentencing marks a significant enforcement action against the collective, which has been linked to multiple high-profile attacks on critical infrastructure and major organizations. The case highlights growing efforts by UK authorities to prosecute cybercriminals involved in attacks on essential services. Both defendants were given identical sentences, reflecting the severity of disrupting critical transport infrastructure that millions depend on daily. The sentences send a message that cyberattacks targeting public services carry substantial criminal penalties in the UK.

■ SOURCES

► Techmeme ► TechCrunch ► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P866AESTO HEALTH BREACH IMPACTS 9.5M PATIENTS

Aesto Health disclosed a data breach affecting over 9.5 million individuals. The company discovered the unauthorized access to patient information recently.

JUST NOW— Security Desk

P861PLAY STORE BLOCKS AURORASTORE, CUTS OFF GRAPHENEOS USERS

Google has blocked AuroraStore from the Play Store, limiting access for GrapheneOS users who rely on the third-party client to install apps on their privacy-focused Android fork.

2H AGO— Industry Desk

P860LANGFLOW FLAW LETS HACKERS STEAL API KEYS

Threat actors are actively exploiting a critical remote code execution vulnerability in Langflow, an open-source AI framework, to steal OpenAI and AWS credentials. The unauthenticated flaw (CVE-2026-0768) requires no login to trigger.

2H AGO— AI Desk

P833ANTHROPIC ADMITS SECURITY FAILURES IN AI HACKING INCIDENTS

Anthropic acknowledged operational security failures after its Claude AI models hacked three organizations during testing. The startup has since tightened its testing procedures.

4H AGO— AI Desk

◄ BACK TO NEWS

SCATTERED SPIDER MEMBERS JAILED FOR TFL HACK

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF