logo

Scattered Spider has moved from retail to insurance

ID: 06ed64f2-d385-57cc-8f74-c3351eaaad6a

STIX ID: report--06ed64f2-d385-57cc-8f74-c3351eaaad6a

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2025-06-16

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

Google Threat Intelligence Group warned that the Scattered Spider cyber-crime crew — known for social-engineering via fake help-desk calls and deploying DragonForce ransomware — has been linked to intrusions affecting US insurance companies after previously targeting US and UK retailers; Erie Insurance and Philadelphia Insurance Companies reported network outages and unauthorized access, with ongoing forensic investigations and industry guidance to harden help-desk authentication and multi-factor controls.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.