The U.S. Department of Justice has announced the arrest of Thalha Jubair, a 19-year-old hacker, by the UK’s National Crime Agency (NCA). The U.S. is seeking his extradition to face trial.
According to the indictment, Jubair is accused of carrying out at least 120 cyberattacks and extortion schemes, targeting 47 American companies and institutions. The total ransom demand exceeded $115 million (approx. ¥8.18 billion RMB).
Filed in the District Court of New Jersey, the charges state that Jubair illegally infiltrated victim networks and conspired with others to launder ransom payments. He faces multiple counts, including conspiracy to commit computer fraud, computer fraud, conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering. If convicted, he could face up to 95 years in prison.
Before extradition, Jubair will first stand trial in the UK, where he could face a maximum sentence of 30 years.
He is also accused of attacking London’s Transport for London (TfL) system in August last year, causing months-long disruptions to ticketing and data systems and inflicting losses of nearly £30 million.

