INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Alleged Scattered Spider Hacker Extradited to U.S for Cybercrime

| 2026-07-02 08:03 CRITICAL LOW DATA BREACH LAW ENFORCEMENT
JSON
Executive Summary
AI-generated
Peter Stokes, 19, an alleged Scattered Spider member known online as “Bouquet,” was extradited from Finland to the U.S. on July 2, 2026, to face hacking, fraud, and extortion charges related to his involvement in multiple cyberattacks, including a 2025 breach of a luxury jewelry retailer where attackers allegedly stole data and demanded approximately $8 million in cryptocurrency. Stokes is suspected of being part of Scattered Spider (aka Octo Tempest , UNC3944 , and 0ktapus ), which has caused major disruption by targeting American companies, stealing data, encrypting systems, and demanding cryptocurrency payments. The group is believed to have cost businesses millions of dollars and disrupted critical operations, with Stokes facing charges related to over 100 network intrusions resulting in more than $100 million in ransom payments and millions more in damages.
Technical Mitigations AI-generated
• Block or hunt for phone, email, or SMS scams to prevent social engineering tactics. • Use a reputable security solution like LastPass to protect against data breaches and identity theft. • Implement multi-factor authentication (MFA) on systems targeted by Scattered Spider members.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Operation RiptideOperation Riptide Scattered SpiderScattered Spider
Target & Sectors
NORTH_AMERICA NORTH_AMERICA NORDICS NORDICS retailretail
Incident Timeline
‎Mar 2023
Thalha Jubair and Owen Flowers, two British teenagers linked to the alleged Scattered Spider hacker group, were extradited to the U.S. in November 2025 to face cybercrime charges.
threat_actor Scattered Spider
In November 2025, two British teenagers, Thalha Jubair (19) and Owen Flowers (18), accused of links to Scattered Spider , pleaded not guilty in Southwark Crown Court to charges under the Computer Misuse Act.
‎April 2025
A suspect allegedly involved in phishing and fraud operations, including stealing at least $800,000 in crypto from victims between August 2022 and March 2023, was extradited to the U.S.
financial $800,000 operations
He admitted involvement in phishing and fraud operations, including stealing at least $800,000 in crypto from victims between Aug 2022 and Mar 2023.
‎May 2025
Tyler Buchanan, a 24-year-old from Scotland linked to the Scattered Spider group, was extradited to the U.S. after admitting in court that he hacked dozens of companies and stole millions in cryptocurrency.
threat_actor Scattered Spider
In April 2026, Tyler Buchanan , a 24-year-old from Scotland, also linked to the Scattered Spider group, admitted in a US court that he hacked dozens of companies, committed fraud, and stole millions in cryptocurrency.
U.S. officials said Scattered Spider (aka Octo Tempest , UNC3944 , and 0ktapus ) has caused major disruption by targeting American companies, stealing data, encrypting systems, and demanding cryptocurrency payments.
financial $20 Americans
Americans reported more than $20 billion in cybercrime losses last year, up 26% from the previous year.
‎April 2026
Threat actors linked to Scattered Spider (UNC3944) were extradited to the U.S. after a British national, Noah Urban, pleaded guilty in Florida and California to related cybercrimes.
threat_actor Scattered Spider
In April 2025, Noah Urban , 20, linked to Scattered Spider (UNC3944), pleaded guilty in Florida and California to conspiracy, wire fraud, and identity theft.
‎2026/07/02
Peter Stokes, an alleged Scattered Spider member known online as "Bouquet," was extradited from Finland to the U.S.
threat_actor Scattered Spider
Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges Alleged Scattered Spider member Peter Stokes, 19, was extradited from Finland to the U.S. over hacking, fraud, and extortion charges.
Peter Stokes, 19, an alleged Scattered Spider member known online as “Bouquet,” has been extradited from Finland to the U.S. to face hacking, fraud, and extortion charges.
Scattered Spider members are part of a broader cybercriminal community called “ The Com ,” where hackers brag about high-profile cyber thefts, typically initiated through social engineering tactics like phone, email, or SMS scams to gain access to…
Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges.
“The criminal complaint charges Peter Stokes with membership in Scattered Spider, a hacking group that has been involved in over 100 network intrusions, resulting in more than $100 million in ransom payments and millions more in damages to the vict…
financial $8 data
Prosecutors say he took part in multiple cyberattacks, including a 2025 breach of a luxury jewelry retailer where attackers allegedly stole data and demanded about $8 million in cryptocurrency.
Tactical Metrics
Metrics
financial
800,000
Operations
He admitted involvement in phishing and fraud operations, including stealing at least $800,000 in crypto from victims between Aug 2022 and Mar 2023.
Metrics
financial
20,000,000,000
Americans
Americans reported more than $20 billion in cybercrime losses last year, up 26% from the previous year.
Metrics
financial
8,000,000
Data
Prosecutors say he took part in multiple cyberattacks, including a 2025 breach of a luxury jewelry retailer where attackers allegedly stole data and demanded about $8 million in cryptocurrency.
Intelligence Sources
Security Affairs 2026-07-02