Two Scattered Spider-Linked Men Receive Five-Year, Six-Month Prison Terms

Two men associated with the Scattered Spider hacking group were sentenced to five years and six months in prison by the United Kingdom National Crime Agency and City of London Police. The pair pleaded guilty during their first court appearance at Woolwich Crown Court on June 22 and were sentenced on Thursday, according to a press release from the NCA. According to Cointelegraph, British authorities said the two were part of the Scattered Spider cybercrime group, which investigators have linked to high-profile ransomware and cryptocurrency extortion attacks targeting companies in the UK and the US. The group was linked to the infiltration of London’s public transport network in September 2024, which led to reported losses and recovery costs of 29 million British pounds ($38.9 million). US prosecutors also linked Scattered Spider to collecting $115 million in crypto ransom payments from at least 47 US companies, according to a September press release from the Department of Justice (DOJ). The group was accused of breaching Caesars Entertainment and stealing a large customer database in September 2023, which prompted the company to pay a $15 million ransom in Bitcoin (BTC). US prosecutors said the attacks disrupted businesses and organizations nationwide, including critical infrastructure and the federal court system. In July 2024, the FBI seized about $36 million worth of cryptocurrency from Scattered Spider-linked wallets, according to the DOJ’s September release. The DOJ said investigators connected the group to at least 120 computer network intrusions and that the FBI traced and seized digital assets tied to wallets allegedly controlled by members of the group as part of its investigation. Matthew Galeotti, then acting assistant attorney general of the Justice Department’s Criminal Division, said the attacks caused widespread disruption to US businesses and organizations, including critical infrastructure and the federal court system, and highlighted the significant and growing threat posed by brazen cybercriminals.