LMF Corporate Member Intelligence

From ransomware and AI-enabled phishing to supply chain compromise, the insurance industry faces a complex and evolving set of cyber risks

NCC Group’s Insurance Industry Threat Intelligence Report examines:

• The most prominent cyber threats in 2025 – including Medusa ransomware and identity-based attacks by groups like Scattered Spider
• The real-world impact of recent incidents affecting millions of policyholders
• Practical recommendations for senior leaders, security teams, and staff to strengthen resilience

By combining sector-specific intelligence with actionable guidance, this report supports insurers in protecting sensitive customer data, meeting regulatory obligations, and maintaining operational continuity.

Cyber threat collective Scattered Spider have broadened their operations to include campaigns against the insurance sector.

Following the group’s targeting of the retail sector in May, NCC Group’s threat intelligence experts have prepared a fresh briefing to help organisations understand the current threat. Providing an up-to-date overview of what we know about Scattered Spider and their latest activity, this new report includes:

• Recent reported security incidents and their impact on new sectors – specifically insurance
• Why the group are targeting insurance
• Reviewing Scattered Spider’s modus operandi
• A sample attack chain highlighting Scattered Spider’s operational sophistication alongside key Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs) observed from May to July 2025
• Practical guidance against Scattered Spider