Chancellor Rachel Reeves Blames Russia for UK Cyberattacks, but Evidence Points to Scattered Spider
In an interview with ITV, UK Chancellor Rachel Reeves asserted that “hostile states such as Russia” were behind recent cyberattacks on British companies. According to her, “a number of attacks are carried out from Russia by Russian entities.” However, no evidence was presented to substantiate these claims.
Reeves’ remarks came against the backdrop of investigations into attacks on Marks & Spencer, Co-op, Harrods, and Jaguar Land Rover. Yet, as The Register notes, official data suggests otherwise. On July 10, the UK’s National Crime Agency (NCA) announced the arrest of four suspects in connection with the Marks & Spencer breach: three Britons and one Latvian national. Investigators believe they are linked to the Scattered Spider group, notorious for its use of social engineering tactics. The NCA also associates them with incidents at Co-op and Harrods.
As The Register highlights, Scattered Spider consists primarily of young threat actors from the UK and the United States, employing SIM-swapping, phishing, and call-center manipulation techniques. The same group was implicated in the attack on Jaguar Land Rover, which forced production in the UK and abroad to a halt for several weeks, resulting in multimillion-pound losses.
According to the publication, authorities regard Scattered Spider as a criminal organization rather than a state-backed entity. “Unless the Kremlin has suddenly started recruiting Mancunians and Californians,” The Register quips.
Following Reeves’ interview, ITV ran a piece headlined: “Was the Chancellor right to blame Russia for recent cyberattacks on Britain?”—a question for which the answer seemed self-evident.
The Register concludes that such unsubstantiated statements risk eroding trust in official communications. For businesses, it remains crucial to distinguish between the actions of youthful cybercriminals and the operations of state-sponsored actors.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.