FBI Tracks Hacker via Windows Device ID

U.S. prosecutors have identified an alleged hacker from the group Scattered Spider who was involved in a burglary at a luxury jewelry store. This is detailed in a newly released federal complaint that shows the connection between the hacker and the use of a persistent Windows device ID. The burglary occurred in May 2025 and was traced back through the analysis of Microsoft data. Investigators were initially able to link the Windows device ID to the account used by the attackers during the break-in.

This ID was then associated with online accounts attributed to 19-year-old Peter Stokes. Stokes is accused of being part of the Scattered Spider group, which is blamed for several cyberattacks. Federal authorities released the complaint against Stokes on July 7, 2026. The document details how investigators tracked the digital trail that led to Stokes.

The use of the Windows device ID proved crucial in confirming the suspect's identity and verifying his connections to the online accounts. The Scattered Spider group is known for its aggressive cyberattacks on businesses and institutions. The group has previously conducted other high-profile burglaries that resulted in significant financial losses. Investigations indicate that the group is not only after financial gain but also seeks the challenge of overcoming security measures. The connection between the Windows device ID and the online accounts was established through the analysis of log data and other digital evidence.

This type of digital forensics is essential for solving cybercrime and is increasingly being utilized by law enforcement agencies. Investigators have emphasized that such technologies help identify perpetrators and hold them accountable. Stokes was described in the complaint as an active member of the Scattered Spider group involved in various cyberattacks. Investigators are also targeting other members of the group who may be involved in similar activities. Authorities are working to understand the entire structure of the group and make further arrests.

The release of the complaint comes at a time when cybercrime is on the rise globally. Businesses and individuals are constantly facing new threats, and the need to strengthen security measures is becoming increasingly urgent. The investigations against Stokes and the Scattered Spider group could serve as a precedent for future cases. Authorities have already taken steps to enhance the security of businesses and protect them from such attacks. These measures include employee training, implementation of security protocols, and the use of advanced technologies for threat detection.

Investigators hope that solving this case will help raise awareness of cybercrime and encourage businesses to take proactive steps. The investigations are not yet complete, and authorities have announced that they will continue to search for further evidence. Collaboration between various law enforcement agencies and technology companies is seen as crucial in effectively combating cybercrime. The next steps in this case are eagerly anticipated as investigators attempt to capture the full scope of the Scattered Spider group's activities. Investigators have stressed that the use of digital evidence, such as the Windows device ID, plays a key role in solving cybercrimes.

These technologies enable authorities to identify perpetrators and penetrate their networks. The importance of such technologies is expected to continue to grow in the coming years. The investigations against Peter Stokes and the Scattered Spider group are part of a broader approach to combating cybercrime. Authorities have announced that they will continue to allocate resources to enhance security in the digital space. The next steps in this case could occur in the coming weeks.

Investigators have highlighted the importance of collaboration between various agencies and the private sector. These partnerships are crucial for effectively combating cybercrime and ensuring the safety of businesses and individuals. The investigations are also expected to take on international dimensions, as cybercrime is often cross-border. The complaint against Stokes was released on July 7, 2026, and contains detailed information about the investigations and the evidence against him.