Who is King Bob aka Noah Urban and What Did He Do? Music Leaker Sentenced to 10 Years in Prison

Noah Urban, also known online as King Bob, has been sentenced to 10 years in federal prison after pleading guilty to multiple charges, including wire fraud and aggravated identity theft.

The 23-year-old hacker became infamous for leaking unreleased music from top artists like Ariana Grande, but prosecutors say his crimes went far beyond music leaks. He was linked to a cybercrime group called Scattered Spider, accused of stealing millions of dollars in cryptocurrency and launching phishing attacks on tech companies.

What Did Noah Urban Do?

According to court documents, Urban and his group used advanced hacking methods to steal cryptocurrency and sensitive data from both companies and individuals.

• Phishing Attacks:
  Urban and his partners tricked employees of tech companies into giving away their login credentials. They did this by sending fake SMS messages with links to websites designed to look like official login pages.

• SIM Swapping:
  Urban reportedly stole personal details of victims and swapped their phone numbers onto devices he controlled. This gave him access to cryptocurrency accounts, which he and his group drained by changing passwords.

• Music Leaks as King Bob:
  Under his online alias “King Bob,” Noah Urban also leaked unreleased songs from artists, including Ariana Grande. While these leaks made him notorious in fan communities, prosecutors say his major crimes were linked to large-scale cyber fraud.

The Scale of the Cybercrime

Prosecutors revealed that between 2022 and 2023, Urban and his group stole at least $800,000 from individuals and targeted over 136 organizations. Losses from their operations were estimated between $9.5 million and $25 million.

When authorities raided his home in 2024, they seized $2.89 million worth of cryptocurrency linked to his activities with Scattered Spider.

Sentencing and Restitution

On August 20, 2025, the Los Angeles federal court sentenced Urban to:

• 10 years in prison

• 3 years of supervised release after serving his sentence

• $13 million restitution to compensate victims

The defense had asked for 8 years, but the judge ruled a longer sentence was necessary due to the scale of damage.

Who Else Was Involved?

Noah Urban was not working alone. Along with four others — Joel Martin Evans, Tyler Buchanan, Ahmed Hossam Eldin Elbadawy, and Evans Onyeaka Osiebo — he carried out phishing campaigns and account takeovers.

The stolen data included:

• Employee credentials

• Personal identifying information

• Intellectual property

• Confidential company files

Companies such as DoorDash were among the victims of the cyberattacks.

Legacy of the Case

Cybersecurity experts say this case is one of the largest SIM-swapping and phishing schemes in recent years. It highlights the growing risks of cybercrime targeting big companies and the importance of stronger security systems.

For music fans, “King Bob” may be remembered for leaking songs, but the federal government sees him as a cybercriminal who stole millions.