Alleged Scattered Spider Member Extradited to US to Face Charges
Summary
Peter Stokes, 19, was extradited from Finland to the US to face charges over alleged Scattered Spider activity. Prosecutors say he and co-conspirators hacked a jewelry retailer in 2025, stole data and demanded an $8 million ransom.
Key points
- Stokes, also known as “Bouquet,” was arrested in Finland in April while boarding a flight to Japan and was extradited to the US.
- He faces charges including conspiracy, computer intrusion and fraud; the allegations have not been established as fact in the article.
- Prosecutors allege that in May 2025 Stokes and co-conspirators hacked a luxury jewelry retailer, stole data and demanded an $8 million cryptocurrency ransom.
- The retailer reportedly evicted the hackers and paid no ransom; the attack and response caused at least $2 million in losses, according to the article.
- The article says Scattered Spider is also tracked under names including 0ktapus, Muddled Libra, Octo Tempest and UNC3944.
Article Details
- Event Type
- Extradition and US prosecution of an individual accused of involvement in Scattered Spider’s cyber operations.
- Impact
- Peter Stokes is accused of joining co-conspirators in a May 2025 hack of a luxury jewelry retailer, stealing data and demanding an $8 million cryptocurrency ransom. The retailer evicted the hackers and paid no ransom, but the disruption and response reportedly caused at least $2 million in losses.
Threat Actors
0ktapusName under which the article says Scattered Spider is also tracked; the article associates the 0ktapus campaign with attacks on over 130 organizations in 2022.Peter StokesThe article says Stokes was indicted on conspiracy, computer intrusion, and fraud charges for his alleged involvement in Scattered Spider’s activities, including an alleged May 2025 attack on a luxury jewelry retailer.Scatter SwineName under which the article says Scattered Spider is also tracked.Scattered SpiderThe article identifies this as the hacking group associated with the alleged attacks. It reports that the group is believed to have hacked at least 100 organizations and received over $100 million in ransom payments.StarfraudName under which the article says Scattered Spider is also tracked.Tyler Robert BuchananThe article reports that Buchanan pleaded guilty in the US to his role in Scattered Spider operations.UNC3944Name under which the article says Scattered Spider is also tracked.
Products
Countries
FinlandThe individual, Peter Stokes, 19, also known as ‘Bouquet’, was arrested in Finland in April while boarding a flight to Japan.United StatesA dual US-Estonian citizen was extradited to the US to face charges for his alleged involvement in the activities of the infamous hacking group Scattered Spider.
Industries
AviationIn September last year, after making the headlines for high-profile attacks against the retail, insurance, and aviation industries, Scattered Spider announced its retirement.InsuranceIn September last year, after making the headlines for high-profile attacks against the retail, insurance, and aviation industries, Scattered Spider announced its retirement.RetailIn September last year, after making the headlines for high-profile attacks against the retail, insurance, and aviation industries, Scattered Spider announced its retirement.