Scattered Spider Vegas casino intrusion and ransomware campaign
Campaign
Summary
Hide ▲
Show ▼
The Scattered Spider operation against MGM Resorts and Caesars Entertainment was a 2023 casino intrusion campaign that caused major operational disruption and exposed sensitive data. The activity ran from August to October 2023 and escalated with BlackCat/ALPHV ransomware. It mattered because the campaign hit multiple major Las Vegas casino operators and produced heavy financial losses.
Related Happenings
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignAbout this happening: The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Rising encryptionless extortion incidents against enterprises in 2025
Target Trend
First: 15.01.2026 17:45
Last: 15.01.2026 17:45
Sources 1
About this happening:
**Encryptionless extortion** surged in **2025** as attackers increasingly skipped ransomware encryption and instead stole data to pressure victims across **enterprise environments...
Rising encryptionless extortion incidents against enterprises in 2025
Target TrendAbout this happening: **Encryptionless extortion** surged in **2025** as attackers increasingly skipped ransomware encryption and instead stole data to pressure victims across **enterprise environments...
ShinyHunters Salesforce extortion campaign against global companies in 2025
Campaign
First: 15.01.2026 17:45
Last: 15.01.2026 17:45
Sources 1
About this happening:
The **ShinyHunters** campaign now includes a **Qantas** breach disclosed after the airline found a **June 30, 2025** intrusion in a **third-party platform** used by one customer s...
ShinyHunters Salesforce extortion campaign against global companies in 2025
CampaignAbout this happening: The **ShinyHunters** campaign now includes a **Qantas** breach disclosed after the airline found a **June 30, 2025** intrusion in a **third-party platform** used by one customer s...
Nevada state government hit by ransomware attack
Incident
First: 06.11.2025 13:54
Last: 06.11.2025 13:54
Sources 1
About this happening:
Nevada state government suffered a ransomware attack that disrupted core public services, including driver’s licenses, background checks, websites, phone systems, and other online...
Nevada state government hit by ransomware attack
IncidentAbout this happening: Nevada state government suffered a ransomware attack that disrupted core public services, including driver’s licenses, background checks, websites, phone systems, and other online...
Latest development: 06.11.2025 21:02
A State of Nevada employee searched Google for a system administration tool and was led by a malicious advertisement to a fraudulent website impersonating the legitimate project, where a trojanized utility installed a hidden backdoor and gave the attacker persistent remote access to the state’s internal network.
Scattered Spider member surrender and UK arrests
Law Enforcement
First: 24.09.2025 23:21
Last: 24.09.2025 23:21
Sources 1
How related:
A 17-year-old hacker who surrendered to face charges over cyberattacks targeting Vegas casinos in 2023 has been released into the custody of his parents, a family court judge ruled.
About this happening:
Authorities **arrested and charged** suspected **Scattered Spider** members in the **UK** and the **US**, including a **17-year-old** who surrendered in **Las Vegas** and was late...
Scattered Spider member surrender and UK arrests
Law EnforcementHow related: A 17-year-old hacker who surrendered to face charges over cyberattacks targeting Vegas casinos in 2023 has been released into the custody of his parents, a family court judge ruled.
About this happening: Authorities **arrested and charged** suspected **Scattered Spider** members in the **UK** and the **US**, including a **17-year-old** who surrendered in **Las Vegas** and was late...
Timeline
-
25.09.2025 15:51 2 articles · 8mo ago
Teen suspect released in Scattered Spider Vegas casino case
Initial DisclosureA family court judge ordered a 17-year-old suspect in the Scattered Spider Vegas casino case released to his parents on a registered Clark County, Nevada address, with limited internet access for educational purposes and restrictions on phones and electronics. The same report ties the 2023 intrusions against MGM Resorts and Caesars Entertainment to BlackCat/ALPHV ransomware, major operational disruptions, compromised sensitive data, more than $100 million in damages at MGM, and a $15 million ransom paid by Caesars.
Show sources
- Teen suspected of Vegas casino cyberattacks released to parents — www.bleepingcomputer.com — 25.09.2025 15:51
- Teen suspected of Vegas casino cyberattacks released to parents — www.bleepingcomputer.com — 25.09.2025 15:51