Story perspectives

Hacker Group Scattered Spider Targets U.S. Insurance Firms

6/18/2025

33 3

Summary

Scattered Spider Targets Insurers

The Google Threat Intelligence Group alerts that the hacker group Scattered Spider is now targeting the U.S. insurance industry.
Confirmed intrusions include Erie Insurance and Philadelphia Insurance Companies.
Scattered Spider uses social engineering tactics, focusing on help desks and call centers for sensitive data access.
The group’s pattern suggests a targeted campaign against insurers.
Insurance firms must strengthen security measures to counter these advanced threats.

Summary

Erie Insurance Responds

Erie Insurance identified suspicious network activity on June 7, leading to swift incident response and law enforcement collaboration.
Two class action lawsuits have been initiated against Erie, alleging negligence in safeguarding personal information and seeking $5 million in damages each.
The lawsuits claim a ransomware group, suspected to be Scattered Spider, breached Erie’s network.
Erie’s systems are currently down, impacting phone, email, and online applications as restoration efforts continue.

History

Historical Context

The 2017 Equifax data breach exposed personal information of 147 million Americans, revealing significant vulnerabilities in the U.S. insurance sector. In 2018, identity theft complaints surged by 69%, underscoring the ongoing threat to sensitive data. The recent targeting of Erie Insurance by Scattered Spider highlights the persistent risks, prompting insurance firms to bolster their cybersecurity measures against sophisticated hacking tactics.

1 of 3

Scattered Spider Targets Insurers

The Google Threat Intelligence Group alerts that the hacker group Scattered Spider is now targeting the U.S. insurance industry.
Confirmed intrusions include Erie Insurance and Philadelphia Insurance Companies.
Scattered Spider uses social engineering tactics, focusing on help desks and call centers for sensitive data access.
The group’s pattern suggests a targeted campaign against insurers.
Insurance firms must strengthen security measures to counter these advanced threats.

1 / 3