💰💣
Scattered Spider Security Incident
2023
995 days ago
Resolved
Incident Overview
Situation Description
Scattered Spider is a hacking group primarily composed of teenagers and young adults from the United States and United Kingdom, known for ransomware and cyberattacks, including significant breaches against major casino companies.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
HospitalityGeographic Scope
National (US)Response Actions
Took Systems or Services Offline
Paid a Ransom
Paid Regulatory Fines or Legal Settlements
Managed Public Narrative & Crisis Communications
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$60,000,000 USDRecords Affected
0Data Types Compromised
PII (Personally Identifiable Information)
Credentials
Primary Impacts
Financial Loss
Operational Disruption
Reputational Damage
Legal/Regulatory Penalties
Key Decisions Made
Caesars Entertainment paid a ransom of $15 million to Scattered Spider.; MGM Resorts disclosed a cyberattack on September 12, 2023, with many systems remaining offline.; MGM agreed to pay a $45 million settlement to victims of the breach in January 2025.
Technical Analysis
Attack Method
Social Engineering
Threat Actor Attribution
Scattered Spider
UNC3944
Star Fraud
Octo Tempest
Scatter Swine
Muddled Libra
Vulnerability / Tool
CVE-2015-2291
Additional Information
Quick Facts
- Company:
- Scattered Spider
- Date:
- 2023
- Status:
- Resolved
- Decision Maker:
- nan
- Position:
- nan
- Published:
- nan
Source Information
Original Query
MGM Resorts class action lawsuit settlement details "Scattered Spider"Timeline
Information Published
nan
Incident Occurred
2023 (995 days ago)
Status: Resolved
Estimated resolution based on age