Thalha Jubair, 20, and Owen Flowers, 18, conducted an “extremely serious hack” on TfL’s online network between August 31 and September 3 2024.