Teen suspect in Scattered Spider hacks is extradited to US

A 19-year-old alleged Scattered Spider member was extradited to Chicago and charged for participating in multiple intrusions, including a May 2025 breach of a luxury-jewelry retailer where attackers used phone-based social engineering to reset authentication (bypassing MFA), accessed IT administrator accounts, employed ngrok to maintain persistent access, and demanded an $8M cryptocurrency ransom; the company refused and reported approximately $2M in disruption and mitigation costs. The report also links the defendant to a 2023 intrusion of an online communication platform and notes U.S. government estimates that Scattered Spider has been involved in over 100 intrusions and collected over $100M in ransom payments.