A 17-year-old hacker who surrendered to face charges over cyberattacks targeting Vegas casinos in 2023 has been released into the custody of his parents, a family court judge ruled.
The teenage boy, who is suspected to be part of the Scattered Spier threat group, has been imposed some restrictions that include limited use of the internet, phone, and electronics.
Although the Las Vegas Metropolitan Police Department did not name the casinos targeted, it noted that the attacks occurred between August and October 2023 and described them as "sophisticated network intrusions" attributed to Scattered Spider.
During that period, Scattered Spider compromised the network of MGM Resorts and Caesars Entertainment casinos. and deployed the BlackCat/ALPHV ransomware.
The incidents caused significant operational disruptions and compromised sensitive data belonging to staff and customers. They cost MGM more than $100 million in damages, while Caesars paid a $15 million ransom.
The prosecutors believe the suspect is still holding an estimated $1.8 million worth of Bitcoin cryptocurrency but it hasn't been found yet. They argued that the suspect should remain detained until the hearing in November, on grounds of his operational sophistication and massive financial gain.
The hacker’s lawyers characterized the detention request as “disingenuous,” highlighting the teen’s clean criminal recor and requesting a supervised release.
Family Court Judge Dee Smart Butler sided with the defense and ordered the release subject to the following restrictions:
- Live with parents on a registered address
- Cannot leave Clark County, Nevada
- Internet access strictly limited to educational purposes
- Restriction on the use of phones and electronics
Any violation of the above will result in the immediate detention by probation officers.
The charges the hacker currently faces concern obtaining personally identifiable information for harm or impersonation, extortion, conspiracy to commit extortion, and unlawful computer acts.
The prosecutors are seeking additional charges and also request that the hacker be tried as an adult, which incurs harsher, long-term imprisonment sentences.
Last year, another teenage boy, a 17-year old, was arrested in connection with Scattered Spider cyberattacks. He was released on bail pending investigation.
The boy was suspected of being involved in the MGM Resorts ransomware attack and part of the Scattered Spider hacking collective.
Break down IAM silos like Bitpanda, KnowBe4, and PathAI
Broken IAM isn't just an IT problem - the impact ripples across your whole business.
This practical guide covers why traditional IAM practices fail to keep up with modern demands, examples of what "good" IAM looks like, and a simple checklist for building a scalable strategy.
Comments
Wh1t3Ryn0 - 3 months ago
See here is the problem, this kid (not a kid at 17 he knows right and wrong) that is just getting a slap on a wrist for causing millions of dollars of damage. Also the fact he is still hiding money and they released him is a pathetic move by the judge. This person needs to be locked up for atleast 10 years for the cyber crime he has commited
ken_smon - 3 months ago
Dude.
He surrendered.
He did not plead guilty.
He has not been convicted.
And you are ready to throw him in jail for 10+ years?
powerspork - 3 months ago
10 years is extreme if you look at some of the other sentences handed out here. The only reason a kid (yes, don't you remember being a stupid 17 year old?) should get hard time for this is to change his view on the viability of criminal life. The point is to change his life trajectory, not entrench it, which is what 10 years will do.
LowLevelisAllitTakes - 3 months ago
at least 1 year in prison and he will learn his lesson
ken_smon - 3 months ago
What is he going to prison for?
Turning himself in?
He has not been convicted of anything, nor has he confessed to anything.
Do we now send people to jail for being ACCUSED of a crime‽‽
Metalace - 3 months ago
Man your reading comprehension is low. Turning himself in was an admission of guilt. They had no evidence of anyone local behind that attack. He only did it because his buddies in the UK got busted.... so yeah
ay_oh - 3 months ago
"Man your reading comprehension is low. Turning himself in was an admission of guilt. They had no evidence of anyone local behind that attack. He only did it because his buddies in the UK got busted.... so yeah"
The alternative is to... not turn himself in, which the police would consider "being on the run". Is that the opposite then?
The mere act of complying with a warrant is not dispositive of anything. And you really think the police are never mistaken and always virtuous? Would you like to purchase this fine slightly used bridge I have?
ken_smon - 3 months ago
Turning oneself in is certainly NOT an admission of guilt.
It is simply a willingness to submit to the judicial system, which in most western countries involves a trial or something similar.
Even in a country that has no presumption of innocence, he still would have an opportunity to attempt to prove his innocence at trial.
Some folks in this forum, however, seem to think we should just toss them in jail for a long period of time.