GBAF Logo
Global Banking & Finance Awards® 2026 Nominations open, free to enter Nominate now →
Suspected member of “Scattered Spider” hacking group extradited to US from Finland, DOJ says - Finance news and analysis from Global Banking & Finance Review
Finance

Suspected member of “Scattered Spider” hacking group extradited to US from Finland, DOJ says

Published by Global Banking & Finance Review

Posted on July 1, 2026

3 min read

· Last updated: July 1, 2026

Add as preferred source on Google

Suspected member of “Scattered Spider” hacking group extradited to US from Finland, DOJ says

Details of the Extradition and Charges

Extradition of Peter Stokes

July 1 (Reuters) - A 19-year-old man accused of being a member of the criminal hacking group "Scattered Spider" was extradited to the U.S. from Finland to face federal conspiracy charges in Illinois, the Justice Department said on Wednesday.

Peter Stokes, a dual citizen of the U.S. and Estonia, faces conspiracy, computer intrusion and fraud charges, according to a criminal complaint unsealed on Tuesday.

Stokes was arrested by Finnish authorities in April after the issuance of an Interpol Red Notice and extradited to the U.S. last week, the department said. He made an initial appearance on Tuesday in federal court in Chicago and was ordered to remain in custody, it said.

Background on Scattered Spider

Scope and Impact of Attacks

The hacking group has been involved in more than 100 network intrusions, resulting in more than $100 million in ransom payments and millions more in damages to the victims, Assistant Attorney General A. Tysen Duva said in the Justice Department statement.

Prosecution of Group Members

U.S. prosecutors announced criminal charges in 2024 against other alleged members of Scattered Spider, a loose-knit community of hackers based mainly in North America and Europe. The group sprang from the Com, a wider network of mostly young, male, Internet-savvy bullies and petty criminals that has become notorious for its culture of extortion, sadism and violence.

Notable Incidents

Casino Operator Attacks

Scattered Spider drew international notoriety in September 2023 when members broke into and locked up the networks of casino operators Caesars Entertainment and MGM Resorts International and demanded hefty ransoms. It has since continued targeting major multinational companies as well as individual cryptocurrency investors. The group is particularly notorious for the threats it makes against individual cybersecurity professionals.

Expert Commentary and Reactions

Statements from Cybersecurity Professionals

Allison Nixon, the chief research officer with cybersecurity firm Unit 221B, said that Stokes was part of a group of hackers that had threatened her as long ago as 2022. Nixon, who has tangled with other hackers from the Com, said stricter punishments were needed to deter the cybercriminals.

"It is my hope that society can understand the stubbornly malicious nature of people from these online gangs, and how current diversion efforts are insufficient," she told Reuters.

Reporting Credits

(Reporting by Daphne Psaledakis, Christian Martinez, Raphael Satter and AJ Vicens; Editing by Chizu Nomiyama and Mark Porter)

Key Takeaways

  • Peter Stokes, alias “Bouquet,” was arrested in Finland on April 10, 2026 while attempting to board a flight to Japan and extradited last week to face U.S. federal charges including conspiracy, wire fraud, and computer intrusion in Chicago. (thecybersignal.com)
  • Prosecutors allege Stokes participated in at least four Scattered Spider hacking incidents since March 2023, one involving a luxury retailer where an $8 million ransom was demanded; two 2 TB hard drives seized at arrest are expected to be critical evidence. (breached.company)
  • Scattered Spider is a loosely affiliated, largely teenage cyber‑crime collective known for social‑engineering attacks, responsible for high‑profile breaches including MGM Resorts ($100 million losses), Caesars Entertainment ($15 million ransom), and over $115 million in ransom payments across more than 120 intrusions. (group-ib.com)

References

Frequently Asked Questions

Who is Peter Stokes in connection to the Scattered Spider group?
Peter Stokes is a 19-year-old dual US-Estonian citizen accused of being a member of the Scattered Spider cybercrime group and has been extradited to the US on conspiracy, computer intrusion, and fraud charges.
What crimes is the Scattered Spider group accused of?
The Scattered Spider group is accused of over 100 network intrusions, resulting in more than $100 million in ransom payments and significant damages to victims, including major US companies.
How was Peter Stokes apprehended?
Finnish authorities arrested Peter Stokes following an Interpol Red Notice, after which he was extradited to the United States to face federal charges.
Which companies were targeted by the Scattered Spider group?
Notable victims include casino operators Caesars Entertainment and MGM Resorts International, both of which suffered network intrusions and ransom demands.
What methods did Scattered Spider use to compromise networks?
They conducted phishing attacks, sending convincing fake text messages to employees’ phones to gain unauthorized network access.

Tags

Related Articles

More from Finance

Explore more articles in the Finance category