Alleged member of hacking group 'Scattered Spider' arrested in Finland
US authorities announced the arrest and extradition of Peter Stokes, 19, a dual US-Estonian national, who was apprehended in Finland in April and faces charges related to a cyberattack on a luxury jewelry retailer and a ransom demand of $8 million.
The US Justice Department announced on Wednesday that an alleged member of the notorious hacking group "Scattered Spider" has been arrested in Finland and extradited to the United States. Peter Stokes, 19, a dual US-Estonian citizen, was arrested in April and appeared at a federal court in Chicago on Tuesday, where he was ordered to remain in custody.
Stokes faces charges of conspiracy, computer intrusion, and fraud. According to a criminal complaint, he and co-conspirators targeted a luxury jewelry retailer's computer system in May 2025, exfiltrating data and demanding a ransom of approximately $8 million in cryptocurrency. No ransom was paid after the retailer's security personnel removed the threat actors from the network. However, the company reportedly suffered at least $2 million in losses due to business disruption, investigation, and mitigation.
"Scattered Spider," also known as "Octo Tempest" or "0ktapus," is a cybercriminal group that extorts ransoms from companies. The FBI has linked the group to over 100 network intrusions, resulting in more than $100 million in ransom payments and millions in additional damages.
In June, two men pleaded guilty in the UK to a cyberattack on Transport for London (TfL). Thalha Jubair, 20, and Owen Flowers, 18, breached TfL's network between August 31 and September 3, 2024, forcing all 28,000 employees to attend an office for a password reset. The organization reported £29 million in losses and recovery costs.
