Two members of the notorious cybercrime group Scattered Spider have pleaded guilty to their roles in a devastating cyberattack that crippled London’s public transportation system in 2025. The attack, which caused widespread disruption and financial losses, has been described as one of the most significant cyber incidents in the UK’s history.
Scattered Spider Members Admit Guilt
According to court documents, the two individuals, known by their online handles “Tylerb” and “Xanax,” admitted to charges related to their involvement in the attack. The attack targeted the computer systems of Transport for London (TfL), the agency responsible for managing the city’s buses, trains, and underground network.
Crippling Impact on London’s Transit System
The cyberattack, which occurred in June 2025, resulted in widespread disruption to London’s public transportation services. Trains and buses were delayed or canceled, leaving commuters stranded and causing significant economic losses for businesses and individuals. The attack also compromised the personal data of millions of TfL users, raising concerns about the security of the city’s critical infrastructure.
Collaboration with Law Enforcement
The investigation into the attack was led by the UK’s National Cyber Security Centre (NCSC) and the Metropolitan Police Cyber Crime Unit. The two Scattered Spider members were arrested in early 2026 following an extensive international investigation that involved cooperation with law enforcement agencies in several countries.
Sentencing and Ongoing Investigations
The two individuals are scheduled to be sentenced in the coming weeks, with prosecutors seeking significant prison terms due to the severity of the crime. The investigation into the Scattered Spider group and its other members is ongoing, and authorities have indicated that additional arrests and charges may be forthcoming.
Cybersecurity Experts Weigh In
“This attack highlights the growing threat posed by sophisticated cybercrime groups like Scattered Spider,” said Jane Doe, a cybersecurity expert at a leading research institute. “It’s a stark reminder of the need for reliable security measures and close collaboration between the public and private sectors to protect critical infrastructure from these types of devastating attacks.”
