British police arrest two teenagers, alleged members of Scattered Spider

The UK’s National Crime Agency (NCA) announced on 18 September 2025 the arrest, two days earlier, of two teenagers aged 18 and 19, suspected of being members of the cybercriminal group Scattered Spider. The arrests are part of the investigation into the hacking of Transport for London (TfL) in August 2024.

The two suspects appeared on 18 September before Westminster Magistrates’ Court, which ordered their pre-trial detention. They are scheduled to appear before Southwark Crown Court on 16 October 2025.

One of the defendants had already been arrested in September 2024 in connection with the same investigation and was later released on bail. He is also accused by the British justice system of having taken part in the hacking of two US healthcare companies.

“The charges brought today represent a key step in a long and complex investigation. This attack caused significant disruption and losses of several million pounds to TfL, which is part of the UK’s critical national infrastructure,” said Paul Foster, head of the NCA’s National Cyber Crime Unit.