Alleged Scattered Spider hacker arrested in Finland

July 2, 2026

A 19-year-old dual US-Estonian national named Peter Stokes has been arrested in Finland and extradited to the United States for alleged participation in the Scattered Spider hacking organization. He faces charges including computer intrusion, conspiracy, and fraud related to cybercrimes that have generated over $100 million in ransom payments according to US authorities. The complaint specifically alleges Stokes and accomplices demanded approximately $8 million in cryptocurrency from a luxury jewelry retailer whose data they stole, though no ransom was ultimately paid.

Who is affected

Peter Stokes (19-year-old defendant)
A luxury jewellery retailer (unnamed, lost at least $2m)
Transport for London and approximately 10 million people whose data was stolen
British retailers Co-op and M&S
Victims who paid over $100m in ransoms to Scattered Spider
Other alleged co-conspirators in the hacking group

What action is being taken

Peter Stokes is being held in custody following his court appearance in Chicago
The FBI (working in Copenhagen and Chicago) and Finland's National Bureau of Investigation are working on the operation
The NCA is investigating cyber attacks on British retailers Co-op and M&S connected to Scattered Spider

Why it matters

This case represents a significant law enforcement effort against Scattered Spider, a sophisticated hacking group responsible for over $100 million in ransom payments and major cyber-attacks affecting millions of people. The international coordination between US authorities, Finland, and Interpol demonstrates the global commitment to combating cybercrime, particularly targeting young hackers who have caused substantial financial losses and data breaches across multiple countries and major organizations.

What's next

No explicit next steps stated in the article

Read full article from source: BBC