What’s Scattered Spider?
According to the US Department of Homeland Security, Scattered Spider is “a cybercriminal group that targets large companies and their contracted information technology (IT) help desks,” with data theft for extortion as its typical MO.
In the recent past, the group had targeted retail operations in the UK, followed by those in the US.
Just in June 2025, two insurance companies have disclosed that they’ve been impacted by cyberattacks. First, Philadelphia Insurance Companies (PHLY) says it discovered unauthorized access on its network, but was able to disconnect the affected systems before the issue spread.
During the same month, Erie Insurance suffered business disruptions, and soon said that the outage was caused by “unusual network activity.”