Federal authorities arrested a teenager accused of affiliating with Scattered Spider, a hacking collective responsible for over a hundred network breaches generating more than $100 million in ransom demands. The suspect allegedly participated in a social engineering scheme targeting a jewellery retailer, in which group members impersonated company employees to acquire administrative credentials and compromise multiple accounts.

Despite deploying technical countermeasures including virtual private networks and traffic tunnelling, investigators traced the suspect through Windows GDID, a Microsoft telemetry service that logs device-specific information. Law enforcement obtained a court order requiring Microsoft to release data linking the suspect to the compromised system, providing the key evidence for prosecution.