Scattered Spider
Security incidents tagged Scattered Spider. Newest first.
0 Scattered Spider incidents in the last 12 months
- Incidents
- 3
- Live
- 0
- Patched
- 3
- Days without an incident
- 479
- Longest quiet run: 564 days (Oct 6–Apr 21)
Show 3 older incidents3 older incidents
June 2025 1
HighQantas: 5.7M customers' data stolen from a contact-centre platformNo fix needed
Qantas contact-centre (third-party platform) No fix needed
A cyber criminal accessed a third-party customer-service platform used by a Qantas contact centre. After deduplication, 5.7M unique customers were affected: names, emails, frequent-flyer details, and for some phone numbers, birth dates, addresses, gender and meal preferences. No passwords, PINs, card or passport data were taken.
April 2025 1
CriticalMarks & Spencer ransomware (Scattered Spider / DragonForce) halts online orders for 46 daysNo fix needed
Marks & Spencer (retail IT, VMware ESXi) No fix needed
Scattered Spider got in through social engineering of a third-party IT provider and encrypted M&S's VMware ESXi hosts with DragonForce ransomware over Easter 2025. Contactless payments, Click & Collect and online ordering broke; online orders were paused from April 25 to June 10. M&S put the hit at about £300M of operating profit.
September 2023 1
- HighNo fix needed
MGM Resorts and Caesars hit by Scattered Spider
Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.
MGM Resorts International; Caesars EntertainmentClosed Oct 5, 2023
