A Scattered Spider member was indicted. Microsoft’s GDID went to trial.

A criminal case against a Scattered Spider member revealed that Microsoft's GDID (Global Device Identifier, a unique identifier automatically assigned to each Windows installation) played a key role in helping investigators connect the suspect to a cyber attack on a jewelry retailer. The indictment raised privacy concerns because it showed Microsoft collects and stores data linking this device identifier to user activity, though legal experts note the complaint does not clarify exactly which Microsoft services collected the data or whether it represents a complete browsing history.