A hacker’s arrest just revealed how Microsoft can track your Windows device

Microsoft knew what websites his Windows PC visited.

By Shikhar Mehrotra Published July 7, 2026 12:51 PM

Windows 11 on a laptop — Sunrise King / Unsplash

A teenager allegedly used a VPN to cover his tracks while hacking a US jewelry retailer, but Microsoft knew anyway.

Court documents unsealed in the US case against Peter Stokes, a 19-year-old dual US-Estonian citizen accused of being a member of the notorious Scattered Spider hacking group, reveal that Microsoft provided the FBI with records tied to a tracking mechanism called the Global Device Identifier, or GDID.

Here’s what you need to know

The identifier, which is automatically assigned to every Windows installation, was enough to link Stokes’ computer to specific websites and third-party services, even though he was running a VPN.

Recommended Videos

Stokes was arrested in Helsinki in April 2026. He was trying to board a flight to Japan, carrying two two-terabyte hard drives. He now faces federal charges in Chicago for conspiracy, computer intrusion, and fraud (via PCMag).

However, the case surely draws attention to the GDID. For most people, this is the first time they’re hearing the term GDID.

What exactly is a Global Device ID (GDID)?

GDID is a unique number tied to a Windows installation on a device, and it can stay the same across normal Windows updates.

According to the criminal complaint, Microsoft’s records showed that Stokes’ GDID accessed specific pages on ngrok, a developer tunneling tool, at precise timestamps, which was enough to reconstruct his activity and link it to the hack.

This identifier can apparently persist across updates, has no simple opt-out, and may allow Microsoft to connect a Windows installation to activity on third-party services, not just Microsoft ones.

In other words, Microsoft may have a record of which websites your Windows PC visited, independent of your browser history and cookie tracking. You can technically opt out of it by reinstalling Windows, as it generates a new GDID.

This is exactly what makes the Stokes case worth paying attention to, even if you have no plans to hack a jewelry store with a VPN anytime soon.

Shikhar Mehrotra

News Writer

For more than five years, Shikhar has consistently simplified developments in the field of consumer tech and presented them…

Topics

Computing

The days of cheap Chinese AI models could be number as government mulls restrictions similar to the US

The AI world’s bargain aisle could be closed by China soon.

DeepSeek AI chatbot running on an iPhone.

DeepSeek's R1 helped kickstart global interest in low-cost Chinese AI. This was followed by increasingly capable systems from Alibaba, ByteDance, and Z.ai. Some models can be downloaded, customized, and hosted independently, giving many developers an alternative to paying for access to expensive US platforms.

However, this bargain may soon face a geopolitical lock--and this time, it's because of China and not the US. Reuters reports that Chinese authorities have held meetings with Alibaba, ByteDance, and Z.ai about potentially restricting overseas access to the country’s most advanced AI systems. Discussions apparently included closed models and open-weight releases, along with technology that has yet to reach the public.

Computing

Microsoft pushed Copilot everywhere, but barely anyone bought it, and even fewer use it: Report

Users are barely showing up for Copilot

Microsoft Copilot Banner Featured

Microsoft has spent the past few years making Copilot extraordinarily difficult to avoid. It appeared in Windows 11, and soon found its way to Edge, Word, and almost everywhere else in Microsoft's software suite. New laptops even received a dedicated Copilot key. Microsoft wanted AI to become a daily habit, and it had hundreds of millions of existing customers to leverage.

But the latest adoption figures suggest that the distribution was quite disappointing. Microsoft revealed that Copilot 365 has more than 20 million paid seats. While that does sound impressive at a glance, this number is dwarfed when you compare the company's more than 450 million paid commercial Microsoft 365 seats. So fewer than 4.5% of those customers pay for the full Copilot experience.

Computing

iFixit wants to fix your appliances next, and it brought a bigger toolkit

iFixit’s new $35 Megalodon wants to save your appliances from the trash

iFixit Megalodon Driver Kit Featured

iFixit built its reputation by showing people how to fix their phones, consoles, and laptops by themselves. But its next target is larger and probably sitting somewhere in your kitchen or laundry room. The company has launched the Megalodon Driver Kit, which is a $34.95 toolkit designed for appliance repairs, furniture assembly, automotive tinkering, and the countless household jobs.

Picture this, your vacuum cleaner may still work perfectly aside from one loose component buried behind a recessed screw. So rather than replace the whole thing, you can make a quick fix with Megalodon.