Tyler Buchanan, a 24-year-old hacker from Dundee, Scotland, has pleaded guilty to conspiracy to commit wire fraud and aggravated identity theft, facing up to 22 years in prison. He was involved in cyberattacks targeting U.S. companies, attempting to steal at least £5.9 million ($7.2 million USD) in cryptocurrency. The U.S. Department of Justice (DOJ) reported that Buchanan was part of a group using text message phishing to deceive employees into revealing their login credentials. His arrest occurred in Spain while he was traveling to Italy, and he has been in U.S. federal custody since April 2025. Buchanan is linked to the hacker group Scattered Spider, which has been responsible for significant cyberattacks, including those on British supermarkets M&S and Co-op in 2025. The attacks disrupted operations, leaving shelves empty and forcing M&S to halt online orders. Another co-conspirator, Noah Michael Urban, has already pleaded guilty and is serving a 10-year sentence for related fraud charges. The investigation involved collaboration between U.S. authorities and Police Scotland.