// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Scattered Spider
Threat Group Dossier

Scattered Spider

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Scattered Spider — 4 attributed incidents across our corpus.
Incidents on file4
First seen2023-09-10
Last seen2025-05-20
Top sectorretail

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (2)T1566 Phishing (1)

Sectors targeted

retail (1)Retail (1)Transportation (1)Hospitality (1)

Attributed breaches

2025-05-20
unknown
M&S and Co-op
2025-04-28
ransomware
Marks & Spencer
2024-09-01
phishing
Transport for London
2023-09-10
ransomware
MGM Resorts

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →