‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty – Krebs on Security

https://krebsonsecurity.com/2026/04/scattered-spider-member-tylerb-pleads-guilty/

Publish Date: 2026-04-21 11:27:36

Summary:
A renowned member of the cybercrime group “Scattered Spider,” Tyler Robert Buchanan, a 24-year-old British national, has pleaded guilty to charges of wire fraud conspiracy and aggravated identity theft. Buchanan, using the hacker handle “Tylerb,” admitted his role in orchestrating a series of text-message phishing attacks in 2022 that allowed the group to breach several major technology companies, resulting in the theft of tens of millions of dollars in cryptocurrency. Known for utilizing social engineering tactics to impersonate employees and contractors, Scattered Spider’s operations led to significant financial losses for both the firms and individual crypto investors. The group’s identity theft and subsequent SIM-swapping attacks resulted in stealing at least $8 million in cryptocurrency from Americans. Buchanan faces a possible prison sentence of over 20 years and has already captured attention in criminal hacking circles. He is one of a few members of Scattered Spider facing legal repercussions, with some already convicted and others awaiting trial either in the U.S. or the U.K. The broader cybercriminal community within Telegram and Discord continues to boast about such high-profile thefts, spotlighting the increasing challenge cybersecurity poses globally.

Key Points:

Tyler Robert Buchanan, a senior member of the cybercrime group Scattered Spider, has admitted to his role in wire fraud and identity theft.
Scattered Spider is known for carrying out social engineering attacks to steal credentials, leading to significant financial losses.
Buchanan, using the handle “Tylerb,” orchestrated text-based phishing attacks leading to breaches at major companies and millions in cryptocurrency theft.
He is extradited to the U.S., awaiting sentencing with a potential maximum of 22 years in prison.
This case highlights the persistent threat cybercriminal groups pose to corporate networks and individual investors.