A 20-year-old member of the notorious Scattered Spider cybercrime group has pleaded guilty to multiple federal charges in Florida and California, marking a major development in the fight against organized cybercrime.
Noah Urban, known online as "King Bob" and "Sosa," admitted to conspiracy, wire fraud, and identity theft charges across two jurisdictions. The Palm Coast resident was involved in sophisticated phishing operations and fraud schemes that targeted numerous organizations.
According to court documents, Urban participated in stealing at least $800,000 in cryptocurrency from five victims between August 2022 and March 2023. The cybercriminal group he belonged to, Scattered Spider, is believed responsible for breaching hundreds of organizations including major tech companies Twilio, LastPass, DoorDash, and Mailchimp.
The group's tactics typically involved social engineering through phone calls, emails, and text messages to gain unauthorized access to corporate networks. Urban specifically admitted to exporting stolen data and helping orchestrate fraud operations across multiple states.
In a notable impact on the entertainment industry, Urban's activities led to the leak of unreleased music from prominent artists including Ariana Grande, Playboi Carti, and Lil Uzi Vert, causing substantial financial and personal distress to the affected musicians.
As part of his plea agreement, Urban will pay approximately $13 million in restitution to victims across both cases. He faces a substantial prison term, including a mandatory two-year sentence for aggravated identity theft that must be served consecutively with any other sentences.
The case represents a rare successful prosecution of a member from a broader cybercriminal community known for celebrating high-profile cyber thefts and digital breaches.