Overview
- Peter Stokes, a 19-year-old dual U.S.-Estonian citizen, was arrested in Finland in April and appeared in federal court in Chicago on June 30, where a judge ordered him detained pending prosecution.
- A criminal complaint unsealed July 1 charges Stokes with conspiracy, computer intrusion, and fraud tied to multiple alleged intrusions attributed to the Scattered Spider collective.
- Prosecutors say the complaint centers on a May 2025 breach of a luxury jewelry retailer where attackers exfiltrated data and demanded about $8 million in cryptocurrency while the victim refused to pay and incurred at least $2 million in losses.
- Finnish officers seized two 2-terabyte hard drives from Stokes at the time of his April arrest, evidence U.S. authorities say could link online handles to real identities and to other suspects.
- Law enforcement frames the case as part of Operation Riptide, a coordinated international effort that has produced prior arrests and guilty pleas and that may lead to further prosecutions and recovery efforts for affected employees and businesses.