The cybersecurity world just witnessed a major milestone with the first sentencing of a Scattered Spider member.
Noah Michael Urban, 20, of Palm Coast, Florida, received a 10-year federal prison sentence and was ordered to pay $13 million in restitution to victims this week.
The Criminal Operation
Urban, known by aliases Sosa, Elijah, Gustavo Fring, and King Bob, pleaded guilty in April 2025 to wire fraud and aggravated identity theft charges. His criminal activities centered on SIM swapping attacks between August 2022 and March 2023.
The scheme worked like this: hackers would obtain personal information about targets, call phone carriers pretending to need SIM card replacements, then control victims’ phone numbers.
Security codes for cryptocurrency accounts would be sent to their controlled devices instead of the victim’s phone.
Florida prosecutors alleged Urban stole at least $800,000 from five victims, but the total damage reached over $13 million across 59 individuals.
TROYPOINT Tip: Never worry about being hacked or having your identity stolen by using Aura which is TROYPOINT’s recommended identity theft protection.
Aura Identity Theft Protection Review
Hide Your Digital Fingerprint
Scattered Spider Network
What makes this case concerning is how Scattered Spider operates as part of a larger network. Federal investigators believe the group evolved from “The Com,” a community of young, English-speaking cybercriminals.
Reports indicate Scattered Spider is aligning with ShinyHunters and possibly LAPSUS$ to create a more formidable cyberthreat alliance. From my perspective covering these groups since 2009, this collaboration represents one of the biggest threats facing businesses today.
Controversial Sentencing
The sentencing proved controversial. Despite prosecutors requesting eight years and defense requesting five years, the judge sentenced Urban to 120 months in federal prison.
Urban called the sentence unjust, claiming the judge discounted his age because another Scattered Spider member had hacked the judge personally during his case. This incident highlights how brazen these criminal groups have become.
The sentencing comes as Scattered Spider resumed activity in 2025, targeting airlines, insurance companies, and retailers after a brief lull following the MGM attack.
Urban’s online hacker alias “King Bob” constantly bragged on social media about these attacks such as stealing unreleased rap music recordings from popular artists. Now Urban’s most recent posts reflect his thoughts around the sentencing.
Final Thoughts
While Urban’s 10-year sentence sends a strong message, the threat continues to evolve. Organizations need stronger security protocols, employee education about social engineering tactics, and vigilant system monitoring.
The $13 million restitution order shows the real financial impact these crimes have on victims – from individuals losing retirement funds to companies suffering massive breaches.
For more details on this story, refer to the official press release from the U.S. Department of Justice and the report from Hackread.
We want to know your thoughts. What do you think about this story? Let us know in the comment section below!
Exclusive Surfshark Discount
Your online activity is currently monitored by your ISP, app/addon/IPTV developers, government agencies, and the websites you visit.
- Become 100% anonymous while streaming and downloading.
- Use on Unlimited Devices & share 1 account with the entire family.
- Save 85% with the 24-Month Plan + Get 3 FREE Months.
Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.
This page includes affiliate links where TROYPOINT may receive a commission at no extra cost to you. Many times, visitors will receive a discount due to the special arrangements made for our fans. Learn more on my Affiliate Disclaimer page.
