Two UK members of Scattered Spider (UNC3944 / Octo Tempest) pleaded guilty on June 23, 2026, for the August-September 2024 Transport for London breach, which exposed data on approximately 10 million customers and caused an estimated 29 to 39 million GBP in damages. The attack exploited no software vulnerability, using MFA fatigue, helpdesk vishing, and SIM swapping exclusively. Scattered Spider remains active across retail, healthcare, and transportation sectors with additional members facing proceedings and confirmed recent targeting of healthcare organizations.