Alleged Scattered Spider Member Peter Stokes Extradited to US

Summary
Peter Stokes, an alleged Scattered Spider member, was extradited to the US and remains in federal custody facing cybercrime charges. Authorities allege he participated in data theft and extortion attempts, including attacks on two businesses in 2025.
Key points
- The 19-year-old dual US-Estonian citizen was extradited from Finland and ordered held in federal custody after appearing in court in Chicago.
- Stokes, also known as “Bouquet” and “Jordan,” is accused of participating in Scattered Spider since its formation in 2022.
- He faces conspiracy, cyber intrusion and fraud charges; the allegations have not been established as facts in the article.
- Authorities cited alleged attacks on a luxury jewelry retailer in May 2025 and a US-based insurance company in June 2025.
- Police arrested Stokes as he attempted to board a flight to Japan, reportedly finding two hard drives containing allegedly incriminating evidence.
- Officials say Scattered Spider has targeted more than 100 businesses and extorted over $100 million since 2022.
Article Details
- Event Type
- Extradition and criminal charges against an alleged Scattered Spider member.
- Impact
- Peter Stokes was extradited to the United States and remains in federal custody facing conspiracy, cyber intrusion, and fraud charges. Authorities say Scattered Spider has infiltrated more than 100 businesses since 2022 and extorted more than $100 million, causing disruption and losses. Stokes is accused of involvement in data theft and extortion attempts, including attacks on a luxury jewelry retailer and a U.S.-based insurance company.
People
Andrew BoutrosU.S. attorney for the Northern District of Illinois who commented on the charges against Stokes and the impact of Scattered Spider's attacks.Brett LeathermanFBI cyber division assistant director who publicly described Scattered Spider's targeting of U.S. companies and the resulting disruption and losses.
Threat Actors
JordanName the source identifies as an alias of Peter Stokes, who is accused of participating in Scattered Spider cybercrime.Peter StokesAlleged Scattered Spider member accused of participating in cyber intrusions, data theft, and extortion attempts. The source says he is also known as “Bouquet” and “Jordan”; his alleged involvement is not presented as a conviction.Scattered SpiderAuthorities say the group has targeted more than 100 businesses since 2022 and extorted more than $100 million. Stokes is accused of membership and participation in data theft and extortion attempts.
Vendors
Countries
EstoniaPeter Stokes, a dual citizen of the United States and Estonia, was allegedly involved in Scattered Spider since it formed in 2022 and boasted on social media about the luxurious globetrotting life he enjoyed while heFinlandStokes was arrested in Finland while trying to fly to Japan with allegedly incriminating hard drives.United Arab EmiratesStokes lived in Estonia and the United Arab Emirates while he allegedly committed some of his crimes.United StatesA 19-year-old alleged Scattered Spider member, Peter Stokes, was extradited to the United States and remains in federal custody facing cybercrime charges.
