00:00The hack taken out by 20-year-old Thala Jubeir and 18-year-old Owen Flowers meant all of TfL's
00:07more than 27,000 employees were forced to attend an office to reset their passwords.
00:14The pair, who conducted the multi-day intrusion, appeared at Woolwich Crown Court on Wednesday. Data from the Oyster refund
00:22system was accessed, contactless systems were delayed and applications for Oyster photo cards for children and young people were closed
00:31down entirely.
00:32The defendants were tied to a group known as Scattered Spider. Along with the £29 million in damages from disruption
00:42to services and operational work, TfL claims the incident cost £10 million in lost income.
00:49The court heard how the hackers worked through the night for 16 hours to access the TfL systems after tricking
00:57the help desk into resetting a password for them.
01:00The prosecution added that the hackers could have shut out and shut down TfL completely, as they eventually had the
01:10highest privileged access in the system, known as the keys to the kingdom.
01:15A TfL victim impact statement read out in court said it is possible that access could have been sufficient to
01:22enable the actor to cause catastrophic damage to many technology systems.
Comments