# Windows Is Tracking You? What You Missed in Cybersecurity This Week

> **Open Intelligence Dossier** · First detected: 2026-07-11 15:07 UTC · Category: Technology

## Executive Summary
The arrest of a 19-year-old hacker has exposed a permanent tracking identifier in Windows 11 that cannot be disabled by users.

## Intelligence Brief
Recent reports indicate that a Windows 11 device identifier, known as a GDID, was used to help the FBI track and arrest a 19-year-old US-Estonian hacker. This individual is allegedly tied to the infamous extortion group known as Scattered Spider. According to coverage from The Hacker News and Tom's Hardware, the tracking occurred after Microsoft shared specific device information with the FBI. This legal process involved the arrest and extradition of the suspect, highlighting the role that telemetry data plays in modern law enforcement operations against cybercriminals. Multiple outlets, including PCMag, Yahoo News Canada, and Windows Latest, are emphasizing the privacy implications of this discovery.


Windows Latest reports that Microsoft has admitted the GDID tracker in Windows 11 has no off switch for the user. The existence of this identifier was first documented publicly through an FBI hacker complaint and court filings. Tom's Hardware describes the Microsoft device identifier as one of many digital fingerprints present in a software environment, noting that this specific telemetry data allowed investigators to identify and track a user who believed they were maintaining anonymity. Contextual coverage from BankInfoSecurity notes that anonymity is an elusive quality for criminals in the digital age. The case involving the Scattered Spider perpetrator demonstrates how telemetry data, which is often collected for system performance or diagnostics, can be repurposed as a forensic tool.


Because the GDID remains active and cannot be deactivated by the end-user, it provides a consistent digital trail that can link a specific physical device to a person's online activities, effectively stripping away the layer of privacy that many users assume they have when using Windows 11. Future developments to monitor include whether Microsoft will provide a mechanism to disable GDID tracking following these public admissions. Coverage currently focuses on the court filings and the specific sequence of events leading to the 19-year-old's extradition. Observers will be watching for further details from the FBI regarding how frequently this specific identifier is used in other criminal investigations. The primary point of interest remains the tension between cybersecurity enforcement and user privacy, as documented by the recent reports from PCMag and other technology news sources.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Yahoo News Canada | A hacker’s arrest just revealed how Microsoft can track your Windows device | [Source Link](https://news.google.com/rss/articles/CBMihAFBVV95cUxOUEFReFB6aTg1THZwcGw2WUFZOVJQYkpJMkg3dmhReVIxdmo5dFlndmF5QWVnNlJmX2U2dF9pREZrZFpXcm1FbDFJZHNPUEhybk9rNF81V0p4bjVpLVpvR1NyNFJQeWU2cFBIWVlFMmU5cnc1VDNfSENLVGIxVGNMTWh1bjY?oc=5) |
| Tom's Hardware | Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them | [Source Link](https://news.google.com/rss/articles/CBMi_gJBVV95cUxNMVI1NVZ4emxVYWtuZlFIdU9OTTEtVlRxUENPUUVDWHZKLUJOVHZOV1hnSk9IRjd3clVza0pSRE8wYjVWdUxET1hOemp1ZHp0Z2wzYmMzVG9mU1o3OXJyb3N6c3dON01zUzFNSTVOQlh0aHVrdmVCUEhTMlFiUmhRLTUxZC13S2tpVmFpTXlkbU45b2NBVnhZb0trZUczeEp6ZFo0NFJKb01YM0NVNG9BWDJsRkp5dUY3aGk4RmExalFjUzFFOE5zYTFkOEdhVXhMRGRzWlhaSzdneTJ1dWd5R0Z5bFp3ekhBZjczN2stUjNJNUNFbzRGb2ZGeFFaczlyRF9ibjJ0N1ZCSFVsRFpDNjF5dVIzc2dmRTBoODNJRXpxSC1XeVFrTElrR2ZqbDJ0UnU2c09rYm9LOGh6aUVEWDROd1hDeHpxeTJoQmdUQ0NDcTlwNXN) |
| Windows Latest | Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint | [Source Link](https://news.google.com/rss/articles/CBMi2AFBVV95cUxPM3RSTXZhb1d5cmZEVlVNOFpUNXcyRFdqRFQyZ3NNcVFXb1lncWNsVkc0TGhKUWZQU2NNU0JtWFpMZTh3cjZPWm5vNE1yNE0zbVRvVmk2Qjl3TmdrTHlSdkhmbWhSdlNfcGhMSnRuVDJCcmFvYW5tVDdNdUdTRTk5SUNtZVFhVVNpOXFHdzd1alFiVkIwNzVialhqdU1WTGxLVk9NMVpYUnhBXy12N3E2ZG02Y3FhbmRHV0lfRjV5bVlpckZBYlZjRGpoRTN5M1RJYkROT0JvYmg?oc=5) |
| BankInfoSecurity | The Most Elusive Criminal Quality: Anonymity | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxPT0hTU3MyT2w3UmVZVW0tc08wRVZOVmhqTlBKSm9EdlVSeWFlMS1US1NvbUhtZUR2T0tpTk1yWUFwS0tveVA1XzA4WElFNjNYV1Q0bko5MjVzMGpfTFRTZVVuYkhCVHV2c0NEVzl4bXRCX3FyNlY1TFduMTktb01WNHlR?oc=5) |
| Tom's Hardware | Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | [Source Link](https://news.google.com/rss/articles/CBMivwJBVV95cUxOUnZzYlp1a01DOXhpT2pPMGIteUdTV2Z4cWVFT2huV3J4N1V1aFFhcjZaS2ZMdUJaSmpGZi0zRExrU1A1NlpyalU2dEJEU19KTl8wWjZkOGdRQUtOMndOTlVGS0JZRUl0eUVUbEZCb3VzdW1XQ0FzSkpXT0JHMTdzbjU5aVplcUJrcDA5YnEtRjk1OGVuS1JYTDM1MFhUaFVJdVBlNm1BdVVDQzMzclZycFNoaURfNzlKdTFmTVFRb1lWYW40cWpJaGxJb0RTZWM2dG1nRXVPM0hXdERLVjNMNjIwcjJSZ2tzQmstQ0ZNMHgwMmE2LUVUWmNKWnlWQzA3MHlfY3QwT0oxTi1MTE9xN0IzcDQ5Q1NKcVFiMGlxOFo0WWk5THZUYUtTeVlnU2xSSHlleHdKczJqdElKWm1F?oc=5) |
| PCMag | A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID | [Source Link](https://news.google.com/rss/articles/CBMinwFBVV95cUxPR18tcjN4al9USHhMQ01vUHh3dm54MHVjLUZFTGxqWGhiQzdGSjg5VXJ2T1k4TEp4MTM2a2RnalV2U3JnXzc0NUdFRG9GNUM0a29CZ21oVG5mcmpCTFE5N1UtWi15WDJOakRIRjgyQjBtSm00ZnBtRFZSVndJLWtlVjIxNDZBSTM5c09iV3RlNS15bnM0Wl9jUWRkay1FREU?oc=5) |
| The Hacker News | Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxNTVdtMVBsZjZoT21SY2dyT3J4ZlRrdlYwS0FfbTZaei1tam1ELUdIQlNtWFpfdXRjZVhaVEtVcDdsWnk5cGtRM0E4RFpoYWZMdUhIWkY2bktSVlhnVjdIRWI4T0Y1WUpndTM1XzdQeVFZZjFlbUh1Sy0tWDJTMllHaDRidw?oc=5) |
| PCMag | Windows Is Tracking You? What You Missed in Cybersecurity This Week | [Source Link](https://news.google.com/rss/articles/CBMimAFBVV95cUxOWXdXTVQ3U2Q0SGdiekF3YVYwRTNPa2xOTGYyX3BSaDU1aGN4LUxsTVhIOGptSnVsRWd2T2NSaVJEMkxUS05FWHJvdi1mc3FEWlF3aGhCWWpqREc2UTFxZ0NSM0R0LVZ6bEk2R1ppMDZ5VUlpeFl1azB1RllSWUo4aEpmWEFPblBVQ1I3ZlJXZTdTV2c4ZEpuaw?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-11/windows-is-tracking-you-what-you-missed-in-cybersecurity-this-week*