A 19-year-old dual citizen of the United States and Estonia has been arrested in Finland and is now facing federal charges in the U.S. for allegedly being a key member of the notorious Scattered Spider group.

According to newly unsealed court documents, the suspect, known online as “Bouquet,” is accused of helping extort millions of dollars from major companies around the world through multiple cyberattacks.

Authorities say he was detained by Finnish law enforcement at Helsinki Airport on April 10 while trying to board a flight to Japan. He now faces charges including wire fraud, conspiracy, and computer intrusion.

Prosecutors claim Bouquet took part in at least four Scattered Spider breaches. One of those attacks reportedly happened in March 2023 against an online communications platform when he was just 16 years old. Investigators say several victims were forced to pay millions in ransom demands.

Another incident named in the complaint involved an unidentified luxury retailer in May 2025. Hackers allegedly impersonated employees while calling the company’s IT helpdesk to reset login credentials, allowing them to access administrator accounts.

The group later claimed to have stolen 100GB of company data and demanded $8 million. The retailer reportedly refused to pay but still suffered more than $2 million in disruption and recovery costs.

Scattered Spider emerged in 2022 and is considered a loosely organized cybercrime group made up largely of teenagers and young adults from the U.S. and United Kingdom. The gang is also tracked under names including 0ktapus, Octo Tempest, UNC3944, and Muddled Libra.

READ
University Of Nottingham Confirms Student Data Breach After Hackers Access Records System

According to the Federal Bureau of Investigation, the group is known for social engineering, MFA fatigue attacks, phishing by text message, and credential theft to break into company systems and later demand ransom payments.

Its known victims include MGM Resorts, Caesars Entertainment, Twilio, Reddit, DoorDash, Jaguar Land Rover, and others.


Buy ExpressVPN with PayPal or Credit Card

Earlier this month, alleged Scattered Spider leader Tyler Robert Buchanan pleaded guilty in the U.S. to wire fraud and aggravated identity theft charges.

Advertisement