Overview
- U.S. prosecutors unsealed a criminal complaint charging Peter Stokes with conspiracy, computer intrusion, and fraud after he was extradited to the Northern District of Illinois and ordered detained following a federal court appearance on Tuesday.
- Finnish authorities arrested Stokes in April under an Interpol Red Notice and reportedly seized two 2‑terabyte hard drives when he tried to board a flight from Helsinki.
- The complaint alleges Stokes took part in multiple intrusions, including a May 2025 breach of a luxury jewelry retailer that led to an $8 million cryptocurrency ransom demand and at least $2 million in victim losses despite no payment.
- The case is part of Operation Riptide, the FBI and DOJ campaign targeting Scattered Spider and related actors, which prosecutors say are tied to more than 100 intrusions and over $100 million in ransom payments.
- Investigators say Scattered Spider uses social engineering like help‑desk impersonation, SMS phishing and MFA fatigue to gain access, and seized devices from arrests have been key to converting online aliases into formal prosecutions.