Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution

A member of the Scattered Spider cybercriminal group, Noah Michael Urban, pleaded guilty and was sentenced to 10 years in prison and ordered to pay $13M restitution for orchestrating SMS-phishing and SIM-swap attacks to steal cryptocurrency and corporate data; investigators recovered $2.89M in crypto and estimate group losses between $9.5M and $25M. The report links Scattered Spider to broader, high-impact activity including a 2023 ransomware attack on MGM and a 2025 wave of disruptions against airlines, insurers, and retailers, noting international arrests and ongoing investigations.