global device identifier

A little-known Windows identifier has suddenly become one of the most consequential privacy stories in Microsoft’s desktop ecosystem. In a federal cybercrime complaint, investigators described using a Global Device Identifier, or GDID, to connect one Windows installation to a proxy-backed...

Additional coverage of this story: Windows GDID Tracks Installations Across Microsoft Services, Court Filing Shows The court-filing account details how investigators tied a GDID to an ngrok account created through a VPN proxy, then compared its historical IP activity with allegedly linked...

Microsoft’s Windows operating system uses a persistent Global Device Identifier, or GDID, that can distinguish one Windows installation from another across selected Microsoft services—and there is no ordinary privacy switch that lets users disable it. The identifier became a public controversy...

Microsoft’s Global Device Identifier, or GDID, has moved from an obscure Windows data field into a live privacy controversy after appearing in a federal cybercrime complaint unsealed on June 30, 2026. The filing describes a persistent identifier that allowed investigators to correlate one...

Additional coverage of this story: Windows GDID Persists Across VPNs and Updates, FBI Records Show The coverage emphasizes that GDID is a correlation key rather than an activity log, applies to virtual machines as well as physical PCs, and changes after a fresh Windows installation. It also...

Additional coverage of this story: Windows GDID Links VPN Activity to Device Records in Stokes Case It traces the alleged link through an ngrok account used in a luxury-jewelry retailer intrusion and says the complaint tied the GDID to a VPN signup and a later visit to the victim’s site. It also...

Peter Stokes, a 19-year-old accused of being part of Scattered Spider, was reportedly linked to alleged activity after Microsoft provided the FBI with IP-address history tied to a Windows Global Device Identifier, according to Korben’s account of a 39-page complaint made public in early July...