Scattered Spider also is known as UNC3944, said Charles Carmakal, chief technical officer at cybersecurity firm Mandiant. 'They appear to be native English speakers under the umbrella of a Russia-based operation called ALPHV or BlackCat.'

'Unofficially, we saw a group called Scattered Spider claimed responsibility,' Callow said. 'We have taken steps to ensure that the stolen data is deleted by the unauthorized actor,' the company said, 'although we cannot guarantee this result.'īrett Callow, threat analyst for the New Zealand-based cybersecurity firm Emsisoft, said it was not clear if a ransom was paid or who was responsible for the intrusion-and for the attack reported Monday by MGM Resorts. 7 that may have exposed driver's license and Social Security numbers of loyalty rewards members. The Reno-based publicly traded company told the federal Securities and Exchange Commission that it could not guarantee that personal information about tens of millions of customers was secure following a data breach Sept.