A Hacker’s Arrest Just Revealed How Microsoft Can Track Your Windows Device
An unsealed complaint says Microsoft records tied a persistent Windows device ID to online activity used in the alleged jewelry retailer hack.
10 Articles
10 Articles
In the world of cybersecurity, recent events are revealing how modern technologies are being used to track attackers. In this article, we examine how a Windows Device Identifier (DMI) helped the FBI track down an alleged hacker from the “Scattered Spider” group. Court Reveal: Windows Device Identifier Helped FBI Track Down Alleged Hacker. U.S. prosecutors have linked an alleged hacker from the “Scattered Spider” group to a breach of a luxury jew…
A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising privacy red flags about Windows' surveillance capabilities.
An alleged member of the Scattered Spider group, Peter Stokes was extradited to the United States where he is charged. A unique identifier linked to each Windows installation contributed to his arrest.
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account the attackers used to keep access during the May 2025 intrusion, then to online accounts prosecutors say belong to 19-year-old Peter Stokes. Stokes is
Cyber Security News
IT Security News - cybersecurity, infosecurity newsWindows Device Identifier Used to Arrest Scattered Spider Hacking Group Member
A persistent Microsoft device identifier was used to unravel the anonymity of an alleged Scattered Spider operator, according to a federal superseding complaint filed in the Northern District of Illinois. Peter Stokes, 19, a dual U.S.–Estonian citizen who allegedly used the handles “Bouquet,” “Spencer,” and “Jordan,” was arrested in Finland on April 10, 2026, while attempting to board a flight to Japan. When detained, he was carrying two two-ter…
Coverage Details
Bias Distribution
- 34% of the sources lean Left, 33% of the sources are Center, 33% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
