00:04The time you've already spent in custody will count towards this sentence.
00:09You acted together and with others unknown to gain unauthorised access to TFL systems at increasingly high levels.
00:17You and those others deployed a combination of techniques, which included social engineering and the use of sophisticated software,
00:25all of which were aimed at exploiting vulnerabilities in the TFL defences, whilst at the same time covering your own
00:33tracks.
00:36Although your activities did not ultimately have an impact upon the ability of TFL to deliver a safe and reliable
00:42network,
00:43the actual disruption caused, which was foreseeable and as to which you were reckless, was very serious indeed.
00:50The Dial-A-Ride booking service, the provision of concessionary travel cards, the digital payments channel
00:58and the rollout of contactless ticketing were all seriously adversely affected.
01:04No fewer than 27,000 users had to reset their passwords.
01:10You also downloaded a significant amount of personal data from the Oyster card database.
01:15The hack, taken out by 20-year-old Thala Jubeir and 18-year-old Owen Flowers,
01:21meant all of TFL's more than 27,000 employees were forced to attend an office to reset their passwords.
01:30Data from the Oyster refund system was accessed, contactless systems were delayed
01:35and applications for Oyster photo cards for children and young people were closed down entirely.
01:42The defendants were tied to a group known as Scattered Spider.
01:46Along with the £29 million in damages from disruption to services and operational work,
01:55TFL claims the incident cost £10 million in lost income.
01:59Your activities ceased only when TFL resorted to taking extreme and desperate measures,
02:06which included severing the means by which all remote access to its systems could be achieved
02:11and disabling all its computer connectivity to the internet.
02:16The remedial work required was in the region of £25 million,
02:22which excludes the costs of taking steps to guard against similar attacks in the future.
02:28Figures of up to £56 billion of potential damage have been mooted by the prosecution
02:34in the event that you'd gone on effectively to close the transport network.
02:39But this is a highly speculative exercise based on consequences which neither of you occurred nor which you intended.
02:48I am satisfied that your actions were primarily motivated by selfish bravado, heedless of the severe consequences to others.
02:57The
02:59You
Comments