Scattered Spider Hacker Noah Urban Sentenced 10 Years, $13M Restitution

Noah Michael Urban, a 20-year-old Florida man and member of the notorious cybercrime group Scattered Spider, was sentenced to 10 years in federal prison for his role in extensive hacking and cryptocurrency theft schemes. Urban pleaded guilty to charges including wire fraud, conspiracy, and aggravated identity theft, involving SIM-swapping attacks that targeted individuals and employees at more than 130 companies, such as Twilio, LastPass, and DoorDash. These attacks allowed the group to steal credentials and siphon millions of dollars, with Urban ordered to pay $13 million in restitution to more than 59 victims. Prosecutors reported that Urban and co-conspirators victimized 29 cryptocurrency holders and 13 companies, resulting in losses estimated between $9.5 million and $25 million, including the theft of victims' retirement funds. Despite requests from prosecutors and defense for different sentencing lengths, a federal judge in Jacksonville imposed a 10-year sentence and three years of supervised release, marking the first sentencing of a Scattered Spider member. Urban’s lawyer characterized the hacking as a misguided game among conspirators, though victim impact statements revealed significant real-world harm.