Alleged Scattered Spider Member Extradited to US After Finland Arrest

The Justice Department unsealed a criminal complaint charging Peter Stokes, 19, a dual U.S.-Estonian citizen, with conspiracy, computer intrusion, and fraud for alleged membership in Scattered Spider (aka Octo Tempest, UNC3944, 0ktapus), which DOJ says has carried out more than 100 network intrusions and extracted over $100 million in ransom payments 1. Finnish authorities arrested Stokes in April on an Interpol Red Notice as he attempted to board a flight to Japan, and he was extradited to the United States last week 12. He appeared in federal court in Chicago on June 30 and was ordered held pending trial 34. The complaint alleges Stokes and co-conspirators breached a luxury jewelry retailer's network in May 2025 and demanded roughly $8 million in cryptocurrency, a ransom the retailer did not pay though it suffered at least $2 million in losses from the intrusion 14. The DOJ credits Finland's National Bureau of Investigation and the FBI's Copenhagen Legal Attaché Office with assisting the case, prosecuted under the FBI's Operation Riptide 1.