Suspected Scattered Spider Hacker Extradited to the U.S. Over $8 Million Ransom

Summary

• Peter Stokes, a 19-year-old accused member of Scattered Spider, has been extradited from Finland to the U.S. to face charges for cyber-related crimes.
• He is linked to a 2025 breach of a luxury jewelry retailer, where the group demanded $8 million in cryptocurrency.
• Scattered Spider is implicated in over 100 hacks, reportedly extorting around $100 million in cryptocurrency ransoms.

Peter Stokes, a 19-year-old suspected member of the hacking group Scattered Spider, has been extradited from Finland to the United States to face serious charges, including conspiracy and cyber intrusion. His extradition follows his arrest in April under an Interpol Red Notice, and he appeared in federal court in Chicago, where he was ordered to remain in custody.

The charges against Stokes are connected to a breach of a luxury jewelry retailer that occurred in May 2025. Prosecutors allege that Stokes and his associates tricked the company's IT department into resetting two-factor authentication credentials, allowing them to access sensitive data and demand an $8 million ransom in cryptocurrency. The company did not comply, sustaining losses of at least $2 million due to operational disruptions.

Alleged Member of Criminal Cyber Hacking Group “Scattered Spider” Arrested in Finland and Extradited to United States @FBIChicago @DOJCrimDiv https://t.co/DWs2d9fns0

— U.S. Attorney’s Office (NDIL) (@NDILnews) July 1, 2026

Expanding Investigations

Scattered Spider, also known as Octo Tempest and 0ktapus, is a decentralized group of hackers associated with over 100 cyber intrusions and an estimated $100 million in ransom demands. Their operations often rely on social engineering techniques, such as impersonating staff during calls to IT help desks, rather than traditional malware attacks. Notably, the group was involved in high-profile incidents in 2023, including attacks on MGM Resorts and Caesars Entertainment.

Stokes is not the only individual facing consequences for their alleged involvement with Scattered Spider. Tyler Buchanan, a 24-year-old believed to be a leader of the group, pleaded guilty earlier this year for a phishing scheme that resulted in significant cryptocurrency theft. Another associate, Noah Urban, was sentenced to a decade in prison for his role in breaches affecting Crypto.com.

Global Trends in Crypto Ransoms

The luxury retailer's refusal to pay the ransom mirrors a growing trend among organizations to resist extortion. In 2025, ransomware groups extorted roughly $850 million in cryptocurrency, a figure consistent with the previous year, even as the number of victims posting on leak sites increased by 44%. Despite a surge in hacking activities, the overall financial impact of ransomware has diminished, dropping from about $1.9 billion in 2024 to approximately $1.3 billion, as many victims choose not to engage with their attackers.