● Covered by 5 sources · 6 reportsMedium impact
19-Year-Old Extradited to U.S. for Role in Scattered Spider Hacks
Key points
- Peter Stokes extradited from Finland to U.S. for hacking charges.
- Accused of 2025 attack on luxury jewelry retailer demanding $8M ransom.
- Stokes part of Scattered Spider, linked to $100M in cybercrime.
- Scattered Spider used tactics like social engineering, credential theft.
- Microsoft's GDID helped track Stokes' involvement.
Extradition and Charges
Peter Stokes, a 19-year-old dual citizen of the United States and Estonia, has been extradited from Finland to the U.S. to stand trial for several hacking-related charges. He is accused of being part of the Scattered Spider hacking group, which has been responsible for extorting millions from various companies worldwide.
Alleged Cyber Incidents
Stokes, known online as 'Bouquet,' is implicated in numerous data breaches, including a significant intrusion in May 2025 at a luxury jewelry retailer where he and accomplices allegedly demanded an $8 million ransom after stealing sensitive data.
Reports state the attackers fooled the retailer's IT helpdesk into resetting credentials, gaining access to administrator accounts, and causing operational disruptions costing over $2 million.
Scattered Spider Group
Scattered Spider, also known by aliases such as Oktapus and UNC3944, is a notorious hacking group linked to receiving over $100 million in ransom payments. Their methods largely rely on social engineering and credential theft to infiltrate and exploit company systems.
The group targeted at least 100 organizations globally, making them a significant concern for cybersecurity agencies.
Role of Technology in Investigation
Microsoft's Global Device Identifier (GDID) was crucial in tracking Stokes' involvement in the hacking activities. This technological aid enabled law enforcement agencies to tie him to various online accounts, leading to his arrest and subsequent extradition.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
A federal complaint revealed that U.S. prosecutors connected a suspected hacker to a 2025 breach at a jewelry retailer using a Windows Device ID. The alleged attacker, Peter Stokes, is facing multiple charges after being extradited from Finland.
Peter Stokes, a 19-year-old U.S.-Estonian citizen, was arrested for his role in the Scattered Spider cybercrime syndicate, linked to over $100 million in ransom payments. Microsoft's Global Device Identifier (GDID) was instrumental in tracking his activities, leading to his apprehension after an extortion attempt on a U.S. jewelry dealer.
Peter Stokes, a dual citizen of the US and Estonia, was extradited to the US facing multiple charges related to the hacking group Scattered Spider. His alleged actions, including a $8 million ransomware attack against a luxury jewelry retailer, highlight the ongoing threat posed by this notorious hacking group, which is linked to over $100 million in ransom payments across various organizations.
Peter Stokes, a dual U.S. and Estonian citizen, has been extradited to the U.S. after his arrest in Finland on charges of being part of the Scattered Spider hacking group. This group has extorted millions from companies globally, utilizing tactics like social engineering and credential theft.
A 19-year-old suspect, Peter Stokes, was extradited from Finland to Chicago to face charges related to hacks by the Scattered Spider group. He is accused of stealing data from a luxury jewelry retailer and demanding an $8 million ransom in cryptocurrency, highlighting ongoing threats from organized cybercrime.
Peter Stokes, 19, has been extradited from Finland to face U.S. charges for his role in the Scattered Spider hacking group. This extradition is part of a wider effort by authorities to hold accountable those behind significant cyber intrusions.