Scattered Spider Members Plead Guilty on UK Trial's First Day

Scattered Spider's UK courtroom debut lasted less than a day before two of its members pleaded guilty. According to Krebs on Security, Thalha Jubair, 20, of East London, and Owen Flowers, 18, of Walsall, admitted on June 23, 2026 to conspiring to commit unauthorized acts against Transport for London computer systems and causing risk of serious damage to human welfare. Flowers additionally admitted involvement in hacking US healthcare providers SSM Health Care Corporation and Sutter Health in September 2024.

The TfL admission only begins to describe the alleged scope. A US federal indictment unsealed in September 2025 alleges that Scattered Spider members carried out 120 network intrusions targeting 47 US entities between May 2022 and September 2025, with victims paying at least $115 million in ransom. Jubair is alleged to have co-run Star Chat, a Telegram channel used to facilitate SIM-swapping attacks against wireless provider employees, redirecting phone numbers to intercept calls and authentication codes.

Both defendants are scheduled for sentencing on July 15, 2026 in London. The pleas follow Tyler Buchanan's guilty plea in April 2026 and the August 2025 sentencing of Noah Michael Urban to 10 years. Three other defendants named in the US indictment are still facing charges.

The honest caveat is that day-one pleas compress the public record: we do not know what cooperation agreements, if any, accompanied the admissions, and the reporting does not address whether Star Chat or similar SIM-swapping infrastructure remains active. Those are the gaps that matter most for defenders in telecom and healthcare.

July 15 will be the more telling moment. If UK courts impose substantial sentences on defendants aged 18 and 20, the cases could function as real deterrence for the social-engineering communities Scattered Spider reportedly recruited from. If not, the operational infrastructure may prove more durable than the individual arrests.