Overview
- Las Vegas police say the teenager turned himself in on Sept. 17 at the Clark County Juvenile Detention Center and was booked on extortion, conspiracy, unlawful acts regarding computers, and three counts tied to personal identifying information.
- The FBI’s Las Vegas Cyber Task Force led the probe that identified the suspect, who has not been named, and authorities have not said whether additional participants are being sought.
- Attacks between August and October 2023 crippled MGM Resorts operations, with the company reporting $100 million in lost revenue plus $10 million in recovery costs, while Caesars reported a loyalty‑program data theft and said it took steps to have the stolen data deleted.
- Investigators and researchers attribute the breaches to targeted social‑engineering that duped help‑desk staff, including impersonation via LinkedIn and password or multifactor resets that enabled rapid access.
- The arrest follows separate U.K. detentions of two alleged Scattered Spider members, and the Justice Department says the collective is linked to 47 U.S. extortion attacks with at least $115 million in ransom payments.