Teen Hacker Arrested for Multi-Million Dollar Cyber Extortion Linked to Scattered Spider
Severity: High (Score: 62.0)
Sources: Bleepingcomputer, Cybernews
Summary
Peter Stokes, a 19-year-old dual citizen of the U.S. and Estonia, was arrested in Helsinki on April 10, 2026, while attempting to board a flight to Japan. He is suspected of being a member of the Scattered Spider hacking group, which has caused over $2 million in damages through various cyberattacks. Stokes, known online as 'Bouquet,' allegedly participated in a May 2025 attack against a multibillion-dollar luxury retailer, using social engineering to gain access to sensitive systems. The hackers demanded an $8 million ransom, but the targeted company incurred significant costs despite refusing to pay. Scattered Spider is notorious for its use of social engineering and credential theft techniques to extort corporations. Stokes flaunted his wealth on social media, showcasing luxury items purchased with illicit gains. He faces multiple federal charges, including wire fraud and conspiracy, as investigations continue into his activities and those of his associates. Key Points: • Peter Stokes, aka 'Bouquet,' arrested for cyber extortion linked to Scattered Spider. • The group caused over $2 million in damages through social engineering attacks. • Stokes faces serious federal charges, including wire fraud and conspiracy.
Key Entities
- Data Breach (attack_type)
- Phishing (attack_type)
- Ransomware (attack_type)
- Zero-day Exploit (attack_type)
- Allianz Life (company)
- Caesars (company)
- Caesars Entertainment (company)
- Co-op (company)
- Doordash (company)
- Estonia (country)
- Finland (country)
- Japan (country)
- United States (country)
- T1078 - Valid Accounts (mitre_attack)
- T1203 - Exploitation for Client Execution (mitre_attack)
- T1566.003 - Spearphishing Via Service (mitre_attack)