⏱ 2 min read
Peter Stokes, a 19-year-old dual citizen of the US and Estonia, has been extradited from Finland to face federal cyber conspiracy charges in the Northern District of Illinois. Stokes is alleged to be a member of the notorious hacking group Scattered Spider, also known as Octo Tempest, UNC3944, and 0ktapus. The group has been involved in over 100 network intrusions, resulting in more than $100 million in ransom payments and millions of dollars in damages to victims. The cyber attacks targeted numerous corporate victims in the US, including a luxury jewelry retailer in May 2025.
According to the complaint, Stokes and likely other co-conspirators breached the retailer’s computer system, exfiltrated data, and made a ransom demand of approximately $8 million in cryptocurrency. However, the retailer’s security personnel successfully evicted the threat actors from the company’s computer network, and no ransom was paid. The retailer still suffered a loss of at least $2 million due to business disruption, investigation, and mitigation of the threat.
Stokes was arrested by Finnish authorities in April pursuant to an Interpol Red Notice and extradited to the US last week. He made an initial appearance in federal court in Chicago and was ordered to remain detained in law enforcement custody. The charges against Stokes include conspiracy, cyber intrusion, and fraud offenses.
The Scattered Spider hacking group has been involved in a string of high-profile cyber attacks, using fraudulent pretenses to gain access to companies’ employee accounts, encrypting data, and extorting cryptocurrency from victims. The group’s activities have resulted in significant financial losses for companies and individuals alike.
📋 Key Facts
- Crime: Cybercrime
- Defendant: Illinois
- Location: IL
- Source: DOJ Press Release
MORE FEDERAL CRIME NEWS
CybercrimeCybercrimeCybercrimeCybercrime