A 19-year-old dual American-Estonian national, Peter Stokes, has been arrested and extradited to the United States on federal charges related to his alleged involvement with the notorious hacking group, Scattered Spider. The US Department of Justice (DoJ) announced that Stokes was apprehended in Finland in April following an Interpol Red Notice, marking a significant development in the ongoing global battle against cybercrime. According to the DoJ, Scattered Spider has been responsible for hacking activities resulting in over $100 million in ransom payments from various victims worldwide. The most recent high-profile incident attributed to the group is the 2024 Transport for London (TfL) cyber-attack, which resulted in the theft of data belonging to approximately 10 million people and cost the organization £39 million. Two young men connected to the TfL attack pleaded guilty to offenses last month, and the DoJ believes Scattered Spider was behind the breach. The group is also suspected of being involved in cyber-attacks on British retailers Co-op and M&S in 2023. Stokes appeared in a federal court in Chicago on Tuesday, where he was ordered to remain in custody. The complaint against him alleges that he and his co-conspirators made a ransom demand of around $8 million in cryptocurrency from a luxury jewellery retailer after stealing its data last year. However, the unnamed company did not pay the ransom and successfully "evicted" the hackers. Despite this, the jewellery company suffered losses estimated at over $2 million due to business disruption, investigation, and mitigation of the threat. The operation that led to Stokes' arrest was a joint effort between the FBI (working in Copenhagen and Chicago) and Finland's National Bureau of Investigation. This case underscores the transnational nature of cybercrime and the need for international cooperation in addressing this growing threat.