British court hands prison terms to cybercriminals in $115M cryptocurrency extortion case
Two individuals admitted guilt following their connection to the notorious Scattered Spider hacking collective, accused by American authorities of targeting numerous corporations.
British law enforcement agencies, including the United Kingdom National Crime Agency (NCA) and City of London Police, announced that two individuals connected to the notorious "Scattered Spider" cybercrime collective received prison sentences totaling five years and six months.
Both defendants entered guilty pleas at their initial court hearing held at Woolwich Crown Court on June 22, with their sentencing taking place on Thursday, as detailed in an official statement released by the NCA.
Law enforcement officials in Britain confirmed that both individuals were members of the Scattered Spider criminal organization, which has been connected by investigative authorities to numerous high-profile cryptocurrency extortion schemes and ransomware incidents affecting businesses across both the United Kingdom and the United States.
Investigators traced the cybercrime collective's activities to a major breach of London's public transportation system that occurred in September 2024, resulting in approximately 29 million British pounds ($38.9 million) in combined losses and expenses related to recovery efforts.
Federal prosecutors in the United States connected the Scattered Spider organization to the collection of $115 million through cryptocurrency ransom demands from no fewer than 47 American businesses, as stated in a Department of Justice (DOJ) press release issued in September.
The criminal organization faced additional accusations related to compromising Caesars Entertainment's systems and obtaining an extensive customer database in September 2023, which resulted in the company making a $15 million ransom payment in Bitcoin (BTC).
According to American federal prosecutors, the collective's malicious activities caused significant disruptions to commercial enterprises and organizational operations throughout the nation, affecting both critical infrastructure systems and the federal judicial network.
FBI seized $36 million from Scattered Spider-linked wallets
During July 2024, the Federal Bureau of Investigation confiscated approximately $36 million in cryptocurrency assets from digital wallets associated with Scattered Spider, as reported in the DOJ's September announcement.
The DOJ's findings revealed that investigative teams established connections between the criminal group and a minimum of 120 computer network breaches. Federal authorities reported that the FBI successfully tracked and confiscated digital currency holdings associated with cryptocurrency wallets purportedly under the control of the organization's members throughout the course of their investigation.
These malicious attacks caused widespread disruption to US businesses and organizations, including critical infrastructure and the federal court system, highlighting the significant and growing threat posed by brazen cybercriminals.
Matthew Galeotti, then acting assistant attorney general of the Justice Department's Criminal Division