A teenager from London is facing serious legal repercussions, possibly up to 95 years in prison, for his alleged involvement in a significant cybercrime scheme that reportedly extorted $115 million from 47 U.S. entities. Thalha Jubair, 19, has been charged with computer and wire fraud, along with multiple conspiracy counts, as part of a malicious hacking group known as “Scattered Spider.” Prosecutors allege that the crimes occurred between May 2022 and September 2025, showcasing a sophisticated operation that targeted at least 120 computer networks, including those of the U.S. federal court system.
The unsealed complaint reveals that Jubair used various aliases, such as “Austin,” “Brad,” and “EarthtoStar,” potentially beginning his exploits at just 15 years old. The victims included airlines, manufacturers, retailers, tech companies, and financial services firms. Notably, the operation reportedly involved contacting company help desks to convince employees to reset users’ passwords. Once inside corporate networks, Jeubair and his alleged conspirators would steal or encrypt sensitive data, demanding ransoms from executives with threats of data deletion or public exposure.
Prosecutors indicated that substantial Bitcoin payments connected to the scheme can be traced back to a server allegedly under Jubair’s control. Among the victim companies, financial firms reportedly shelled out significant sums, including $25 million and $36.2 million in Bitcoin in 2023. In one striking incident on January 8, 2025, Jubair allegedly misled a U.S. Courts network staff member into resetting a password, gaining access to two other accounts, including one belonging to a federal magistrate judge. This breach allowed the hackers to search the judge’s inbox for sensitive terms and potentially valuable information.
The National Crime Agency (NCA) in the U.K., along with City of London Police, arrested Jubair at his home in East London this week. Another teenager, Owen Flowers, 18, from West Midlands, was also apprehended for a separate attack on Transport for London, a government agency managing transport services in the city. Both youths appeared in Westminster Magistrates Court, with Flowers facing charges related to conspiring against two U.S. healthcare companies, SSM Health Care Corporation and Sutter Health. Meanwhile, Jubair was charged for failing to cooperate with authorities regarding passwords for devices seized during the investigation.
The consequences of these cybercrimes extend beyond the immediate financial impact. According to Matthew R. Galeotti, acting Assistant Attorney General of the Department of Justice, these cyberattacks have posed significant threats to U.S. businesses and critical infrastructure. The FBI also expressed commitment to pursuing cybercriminals, highlighting international cooperation with agencies in the U.K. to combat growing threats posed by such violent cyber schemes. As investigations continue, both Jubair and Flowers remain in custody, awaiting further legal proceedings.
