Two teenagers, Owen Flowers and Thalha Jubair, who were convicted of hacking Transport for London (TfL) in 2024, had long histories with law enforcement. Despite frequent attempts to deter them, their cyber-offending escalated. The breach affected millions of people's data and required all TfL employees to reset passwords.
The case highlights the challenges in dealing with high-risk cyber-crime offenders, especially when they are diagnosed with autism. Experts call for stronger legal interventions, such as Cyber Crime Risk Orders (CCROs).
Flowers was part of Scattered Spider, a group linked to other major attacks. He was found in possession of millions of pounds worth of cryptocurrency during his arrest. Jubair has 22 previous convictions and faces charges in the US for a $87m cyber theft.
The court heard that both men were aware of their legal troubles but continued their crimes, raising questions about understanding of consequences among young cyber-criminals. Their stories underscore the need for enhanced deterrence measures.
