Scattered Spider Conviction — 22 June 2026: The £29m TfL Breach Playbook Every UK SME Must Study Before the Next Attack
On 22 June 2026 two British teenagers pleaded guilty at Woolwich Crown Court to hacking Transport for London — a three-day breach that cost TfL £29m and forced 28,000 employees to reset passwords in person. Here is the full social-engineering decode: how Scattered Spider gained access, why the same tactics work against any UK SME, and the 10-step IT Support plan to close the same identity and access gaps before sentencing day on 16 July 2026.














