A 19-year-old alleged member of the notorious Scattered Spider extortion crew has been extradited to the United States and is currently facing multiple cybercrime charges. Peter Stokes, a dual citizen of the US and Estonia, has been accused of participating in Scattered Spider’s operations since its formation in 2022. The group, known for its sophisticated tactics and native English-speaking members, has infiltrated over 100 businesses worldwide, extorting more than $100 million from its victims.
Scattered Spider has gained notoriety for targeting US companies, inflicting significant financial losses and disrupting critical operations. According to the FBI’s Assistant Director Brett Leatherman, “Scattered Spider has repeatedly targeted U.S. companies, extorting employees, inflicting millions of dollars in losses, and disrupting essential operations.” The group’s activities have spanned across multiple countries, with Stokes living in Estonia and the UAE while allegedly committing some of his crimes.
Stokes, also known as “Bouquet” and “Jordan,” has been tracked by cybercrime researchers since 2022. Microsoft had identified him as a member of Scattered Spider through a criminal referral in October 2024. At the time, Stokes was still a child, and it is rare for authorities to arrest known cybercriminals until they reach adulthood. However, Stokes’ online activity suggested a more sinister intent, with images of luxury items and travel records revealing an opulent lifestyle.
Stokes’ capture occurred on April 10, when he attempted to board a flight to Japan from Finland. Authorities arrested him as he possessed two hard drives containing allegedly incriminating evidence. He made his initial court appearance in Chicago earlier this week and was ordered to remain in jail. The charges against Stokes include conspiracy, cyber intrusion, and fraud offenses.
The case highlights the increasing sophistication of cybercrime groups and their ability to evade detection. Scattered Spider’s operations have been particularly concerning, with officials noting that the group has caused widespread disruption to businesses across the US. As Assistant Director Leatherman emphasized, “Through strong domestic and international partnerships, the FBI will continue to identify, disrupt, and hold cybercriminals accountable, no matter where they are located.”
For individuals and organizations, this case serves as a reminder of the importance of cybersecurity measures and vigilant monitoring of online activity. With cybercrime groups becoming increasingly brazen, it is essential to stay informed about emerging threats and take proactive steps to protect against them.
Source: CyberScoop — 2026-07-02