A 24-year-old hacker from Dundee, Scotland, faces as much as 22 years in a U.S. jail after pleading responsible to conspiring to steal not less than £5.9 million in digital foreign money from American corporations. Tyler Buchanan admitted to at least one depend of conspiracy to commit wire fraud and one depend of aggravated identification theft.
The Phishing Operation
Buchanan and his accomplices used SMS phishing assaults to deceive staff at numerous U.S. companies. They despatched a whole lot of fraudulent textual content messages, impersonating corporations or their suppliers, to seize login credentials. These credentials allowed unauthorized entry to pc techniques.
Between September 2021 and April 2023, the group focused telecommunications suppliers, IT suppliers, cloud providers, cryptocurrency exchanges, and personal people. A search of Buchanan’s house in Scotland uncovered a tool with sufferer names, addresses, cryptocurrency seed phrases, and stolen login particulars.
The hackers developed a phishing package that directed victims to pretend web sites mimicking reputable ones. Captured credentials had been relayed to a Telegram channel managed by Buchanan and a co-conspirator.
Connection to Scattered Spider
Authorities hyperlink Buchanan to the Scattered Spider hacking collective, a gaggle of round 1,000 principally younger British and American members recognized for high-profile ransomware assaults. This group is suspected within the 2025 cyberattacks that disrupted British retailers Marks & Spencer (M&S) and Co-op, emptying cabinets and halting M&S on-line orders for weeks.
The Nationwide Crime Company recognized Scattered Spider as a main focus in Might 2025. The group typically calls for massive ransoms after breaching techniques.
Buchanan additionally faces allegations within the 2023 hacks of Las Vegas giants Caesars Leisure and MGM Resorts Worldwide. Prosecutors describe a £9 million cryptocurrency rip-off involving phishing texts warning of account closures, main victims to bogus websites the place particulars had been harvested.
Arrest and Authorized Proceedings
Officers arrested Buchanan in Spain final yr en path to Italy. He has remained in U.S. federal custody since April 2025, with sentencing set for August 21.
Co-conspirator Noah Michael City pleaded responsible in April 2025 to a few fraud expenses, receiving a 10-year sentence and ordered to pay £5.9 million in restitution. Three different U.S.-based defendants await trial. Police Scotland assisted the FBI within the investigation.
