Scattered Spider Targets Insurance Firms, Google Warns
- Multiple U.S. insurance companies, including Erie Insurance and Philadelphia Insurance Company, experienced cyberattacks causing system outages since early June 2025.
- The attacks coincided with Scattered Spider shifting focus from U.K. retailers to U.S. insurance firms about a week and a half ago, according to cybersecurity experts.
- Scattered Spider uses social engineering, SIM-swapping, MFA fatigue, and fake help-desk calls to gain access before deploying ransomware variants like DragonForce.
- John Hultquist, a lead expert at Google's Threat Intelligence team, reported emerging incidents affecting the insurance sector and highlighted risks of social engineering attacks aimed at help desks.
- Erie Insurance is collaborating with law enforcement and cybersecurity experts on a forensic investigation while continuing protective actions and restoring system access.
Insights by Ground AI
Does this summary seem wrong?
27 Articles
27 Articles
All
Left
Center
8
Right
Scattered Spider, fresh off retail sector attack spree, pivots to insurance industry
Scattered Spider, the loose-knit cybercrime collective that recently ran roughshod over U.K.- and U.S.-based retailers, has pivoted once again, setting its sites on insurance companies, according to Google Threat Intelligence Group. Google previously warned that the financially motivated threat group, which it tracks as UNC3944, was pivoting to U.S. retailers following a wave of ransomware and extortion attacks on retailers and grocery stores in…
Coverage Details
Total News Sources27
Leaning Left0Leaning Right0Center8Last UpdatedBias Distribution100% Center
Bias Distribution
- 100% of the sources are Center
100% Center
C 100%
Factuality
To view factuality data please Upgrade to Premium