Scattered Spider, a threat group behind a series of high-profile cyber attacks, uses sophisticated social engineering attacks. The group has targeted Okta, MGM Resorts and Caesar’s Entertainment, causing prolonged disruptions and $100m in losses for MGM. Scattered Spider impersonates IT personnel and uses SIM swapping attacks to acquire sensitive user data. The group also uses ransomware to extort victims and often threatens to release sensitive data. The FBI and CISA put out an advisory warning businesses to maintain offline backups and enforce phishing-resistant multifactor authentication.
Weill Cornell Medicine discloses an insider data breach
On February 23, HHS received a breach submission from Weill Cornell Medicine in New York. The submission reported that 516 patients were affected by an


