Alleged longstanding member of Scattered Spider extradited to US

Peter Stokes, a 19-year-old alleged member of the Scattered Spider cybercriminal group, was extradited to the US after participating in data theft and extortion schemes targeting over 100 businesses globally, netting more than $100 million. Scattered Spider is notorious for leveraging social engineering tactics — such as SIM swapping, phishing, and help desk impersonation — to bypass security controls and gain privileged access. This case highlights how young, loosely organized threat actors can cause catastrophic damage by exploiting human vulnerabilities rather than sophisticated technical exploits. Organizations that rely too heavily on technical controls without addressing the human element remain dangerously exposed to these tactics.