Scattered Spider, ShinyHunters Restructure – New Attacks Underway

According to Resecurity, Scattered Spider, ShinyHunters and LAPSUS$ are forming a “Trinity of Chaos” alliance driving a global cybercrime wave, with coordinated hacks and extortion operations continuing against major enterprises and numerous incidents yet to be disclosed. The analysis flags a surge in private extortion attempts, suggesting the true scale of compromised data across sectors such as finance, technology, aviation, retail and automotive is only just emerging.

UK’s Cyber Monitoring Centre labels at least two attacks on Marks & Spencer and Co-op as Category 2 events, with financial impact estimated between £270 million and £440 million. The government has announced a £1.5 billion loan guarantee for Jaguar Land Rover in response to a disruptive cyberattack, while reports note JLR’s outsourcing of cybersecurity and IT services to Tata Consultancy Services, which also works with Marks & Spencer and Co-op.

Journalists tracking the cybercrime landscape will find this development a crucial resource on the evolving threat and what may still lurk below the surface, ahead of further disclosed incidents as of 30 September 2025.