DOJ says Finland extradites alleged Scattered Spider member over crypto ransom attacks
Prosecutors said the group carried out more than 100 intrusions, collected over $100 million in crypto ransoms and caused millions in additional losses; Peter Stokes is tied to a May 2025 attack seeking about $8 million.
Finland has extradited 19-year-old U.S.-Estonian dual citizen Peter Stokes to the United States to face conspiracy, computer intrusion and fraud charges tied to the alleged cybercrime group Scattered Spider, the U.S. Justice Department said. Prosecutors alleged the group was behind more than 100 intrusions, took in over $100 million in crypto ransoms and inflicted millions in further losses. Stokes is accused of joining a May 2025 attack that sought about $8 million, underscoring continued U.S. efforts to pursue alleged ransomware and intrusion cases across borders.
- crypto ransoms: Digital-asset payments demanded by attackers
- computer intrusion: Unauthorized access to computer systems
- Scattered Spider: Alleged cybercrime group named by prosecutors