A Notorious Hacking Group’s Alleged Member Extradited to Face US Charges
In a significant blow to the notorious hacking group Scattered Spider, a 19-year-old dual US-Estonian citizen has been extradited to the United States to face charges related to the group’s activities. Peter Stokes, also known as ‘Bouquet’, was arrested in Finland in April while attempting to board a flight to Japan.
Stokes is accused of conspiring with other hackers to breach the computer system of a luxury jewelry retailer in May 2025. The attack resulted in the theft of sensitive data and demands for an $8 million ransom, which were paid in cryptocurrency. Although the victim was able to evict the hackers from its network without paying the ransom, the disruption caused by the attack led to significant business losses, estimated to be over $2 million.
Scattered Spider is a highly prolific hacking group that has been linked to numerous high-profile attacks around the world. The group’s activities have included hacks of Salesforce and a campaign targeting over 130 organizations in 2022, dubbed ‘0ktapus’. Authorities estimate that Scattered Spider has received over $100 million in ransom payments from its victims.
This development is part of a larger effort by law enforcement to dismantle the Scattered Spider network. In recent years, multiple alleged members of the group have been arrested, charged, or sentenced for their roles in the hacking activities. Just last month, UK national Tyler Robert Buchanan pleaded guilty in the US for his involvement with Scattered Spider.
Interestingly, Scattered Spider made headlines in September 2025 by announcing its retirement from cybercrime. However, it appears that some members of the group may still be active and continue to engage in malicious activities.
The extradition of Stokes marks a significant step forward in efforts to bring Scattered Spider’s alleged leaders to justice. As law enforcement agencies continue to crack down on hacking groups like Scattered Spider, organizations must remain vigilant in protecting themselves against these types of threats.
To stay ahead of the game, it’s essential for businesses and individuals to implement robust security measures, including regularly updating software and systems, using strong passwords, and monitoring their networks for suspicious activity. By doing so, they can reduce the risk of falling victim to attacks like those carried out by Scattered Spider.
Source: SecurityWeek — 2026-07-03