Scattered Spider hacking group allegedly behind cyber-attacks on Marks & Spencer


The culprit behind the M&S cyber attack is still a matter of investigation but speculation has pointed to a group called Scattered Spider.

Also called UNC3944, Octo Tempest or Muddled Libra, Scattered Spider is a hacking group comprised of hackers – some thought to be as young as 16. Members are said to frequent hacker forums, Telegram channels and Discord servers and are believed to be linked to the “Com”, a loosely affiliated community known for cyber and real-world criminal activity. According to Graeme Stewart, the head of public sector at security company Check Point, “Scattered Spider is one of the most dangerous and active hacking groups we are monitoring. “Since they first appeared in 2022, they have been linked to more than 100 targeted attacks across industries such as telecoms, finance, retail and gaming.” Members have been suspected of a hack on Caesars casinos – which cost the group $15m (£11.2m) to restore its network.

Read more…
Source: Yahoo News


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • NYC Health + Hospitals says hackers stole medical data affecting at least 1.8m people

    May 18, 2026

    New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people. NYCHHC is the largest public health system in the United States and provides healthcare to over a million New Yorkers, the majority of whom are uninsured or ...

  • Scammers are targeting World Cup fans

    May 16, 2026

    We’re less than a month away from the biggest sporting event of the year, the FIFA World Cup, and scammers are already busy stealing money, passwords, and other sensitive data from fans and visitors, experts have warned. Kaspersky has published a breakdown of the different scam techniques cybercriminals are using to target football fans as they ...

  • Hackers have breached tank readers at US gas stations

    May 15, 2026

    US officials suspect Iranian hackers are behind a series of breaches of systems that monitor the amount of fuel in storage tanks serving gas stations in multiple states, according to multiple sources briefed on the activity. The hackers responsible have exploited automatic tank gauge (ATG) systems that were sitting online and unprotected by passwords, allowing them in some cases ...

  • ShinyHunters: Cyber Criminal Group Attacks Learning Management System

    May 15, 2026

    The Federal Bureau of Investigation (FBI) is providing this Public Service Announcement (PSA) to warn of potential future impacts related to a cyber-attack that affected an online Learning Management System (LMS), resulting in an interruption of service to educational institutions and students across the country. The LMS platform is now fully operational. ShinyHunters (SH) — which ...

  • OpenAI caught in TanStack npm supply chain chaos after employee devices compromised

    May 15, 2026

    OpenAI says attackers behind the TanStack npm supply chain compromise stole internal credentials after reaching two employee devices, forcing the company to rotate signing certificates for several desktop products. The company disclosed this week that it had been caught up in the wider “Mini Shai-Hulud” campaign targeting npm ecosystems and developer infrastructure, though it said there was no ...

  • Ransomware hackers claim breach at Foxconn, a major electronics manufacturer for Apple, Google, and Nvidia

    May 13, 2026

    Electronics manufacturing giant Foxconn, which makes devices and components for Apple, Google, Nvidia, and Sony, among other tech giants, confirmed on Monday that it was hit by a cyberattack that may have affected some of its factories. In a statement sent to media outlets, Foxconn said that the cyberattack affected facilities in North America and that ...