Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

The FBI used a persistent Windows device ID to trace an alleged Scattered Spider hacker responsible for a luxury jewelry retailer's break-in, according to a recently unsealed federal complaint. Microsoft's records linked the device ID to an account used by the attackers during the May 2025 intrusion and subsequently to online accounts belonging to 19-year-old Peter Stokes. This case underscores the potential for digital forensics to uncover cybercriminals through unique identifiers, highlighting the importance of robust cybersecurity measures to prevent such breaches.