Could not load profile for scattered-spider right now.
The upstream tracker may be temporarily unreachable. Try refreshing in a moment.
// CONFIRMED ATTACKS
Scattered-Spider confirmed attacks: 4 verified incidents
Ransomnews has verified 4 Scattered-Spider incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2023 to August 2024. United States accounts for 3 of them (75%), with victims recorded in 2 countries in total. The most affected sector is other, at 2 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 1; the outcome is unrecorded in the remaining 2. Where a figure was disclosed (3 cases), these incidents account for 8,664,139 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Scattered-Spider incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2024 | Transport for London | Government | London, United Kingdom | — | Unknown | Source |
| June 2024 | Findlay Automotive | Retail | Nevada, United States | 562 | Unknown | Source |
| September 2023 | MGM Resorts | Other | Nevada, United States | 1,481,149 | No | Source |
| August 2023 | Caesars Entertainment | Other | Nevada, United States | 7,182,428 | Yes | Source |
Claimed vs confirmed. The figures above the fold on this page come from Scattered-Spider's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design — most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.