On 16 July 2026, two nineteen-year-olds were sentenced at Woolwich Crown Court to five and a half years each for the 2024 Transport for London attack.

£29m to remediate. 148 systems disabled. 27,000 staff resetting passwords in person. The first UK conviction under Section 3ZA of the Computer Misuse Act.

The instinct is to read this as a cyber story. I’m going to read it as a criminological one, because a criminologist has seen this shape before. Mods on scooters at Clacton. Graffiti writers on the Metropolitan line. Instagraff kids trading followers for legal walls. Chilean metro crews spraying a carriage while passengers film them. And now Jubair and Flowers, livestreamed inside the London transport network. The act keeps changing -the reason it is watched has not.

In this Lunchtime Lecture I take the TfL sentencing as a starting point and ask a different question: what has actually changed between a spray-can on a train and a domain admin account at TfL — and what hasn’t?

We’ll cover:

→ Why adolescent transgression is developmentally ordinary, and why treating every teenage cybercrime as a national emergency feeds the next one
→ Cohen’s moral-panic cycle and Wilkins’ deviancy amplification spiral, applied to teenage hackers
→ Kidulthood vs The Inbetweeners — same country, same decade, same behaviours, two very different verdicts on youth
→ My Instagraff research on how Web 2.0 rewrote the graffiti writer, and why the Chilean crews are the missing intermediate case
→ What the livestream is actually doing in a Section 3ZA offence — as selfhood, status, proof, and loop
→ Four concrete implications for prevention, response, and communications

The teenager did not change. The audience did. So what does this mean for the future of financial crime? Join us and find out.

https://meeting.zoho.eu/meeting/register?sessionId=1260281228