Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

U.S. prosecutors used a persistent Windows device ID to link an alleged Scattered Spider hacker to a May 2025 intrusion at a luxury jewelry retailer. Microsoft records connected the ID to an account used during the attack and to online accounts tied to 19-year-old Peter Stokes.