Scattered Spider Hackers Sentenced to Prison in UK Over Multi-Million Dollar Ransomware Attacks
The defendants received prison terms following high-profile attacks on London's transit network and US corporations.
LONDON — Two cybercriminals associated with the notorious “Scattered Spider” hacking collective have been sentenced to five years and six months in prison in the United Kingdom. The sentencing follows a coordinated investigation by the National Crime Agency (NCA) and the City of London Police, marking a significant victory for international law enforcement against high-profile ransomware and cryptocurrency extortion operations.
According to official statements, the two individuals pleaded guilty during their first court appearance at Woolwich Crown Court on June 22, with their formal sentencing handed down on Thursday.
## International Cybercrime Syndicate Dismantled
The Scattered Spider group, a highly active cybercrime syndicate, has been linked by investigators to a string of devastating digital assaults targeting major corporations and public infrastructure in both the United Kingdom and the United States.
Among the group’s most disruptive UK operations was the September 2024 infiltration of London’s public transport network. That breach caused widespread operational issues, resulting in an estimated 29 million British pounds ($38.9 million) in financial losses and recovery costs.
## Global Financial Impact and High-Profile Targets
The group’s reach extended far beyond the UK. In the United States, federal prosecutors have tied Scattered Spider to at least 120 computer network intrusions. According to a September press release from the U.S. Department of Justice (DOJ), the group successfully extorted approximately $115 million in cryptocurrency ransom payments from at least 47 U.S. companies.
One of their most prominent targets was Caesars Entertainment. In September 2023, the group breached the hospitality giant’s systems and exfiltrated a massive customer database. To prevent the release of the sensitive data, the company reportedly paid a $15 million ransom in Bitcoin (BTC).
U.S. authorities have emphasized that the group’s aggressive tactics went beyond commercial extortion, directly threatening national infrastructure and government operations.
“These malicious attacks caused widespread disruption to US businesses and organizations, including critical infrastructure and the federal court system, highlighting the significant and growing threat posed by brazen cybercriminals,” said Matthew Galeotti, then acting assistant attorney general of the Justice Department’s Criminal Division.
## Law Enforcement Crackdown and Asset Seizures
In response to the escalating threat, international law enforcement agencies have aggressively targeted the group’s financial networks. On-chain data and blockchain analysts suggest that tracking illicit digital asset flows has become central to these operations. In July 2024, the FBI successfully seized approximately $36 million worth of cryptocurrency from digital wallets linked to Scattered Spider. According to the DOJ, investigators traced the assets directly to addresses controlled by members of the cybercrime ring as part of their broader investigation.
