M&S hackers believed to have gained access through third party
- Marks & Spencer and Co-op suffered cyberattacks in early May 2025 that disrupted systems and led to stolen customer personal data in the UK.
- Attackers accessed M&S systems through social-engineering targeting a third-party contractor, remaining undetected inside for over two days.
- Hackers deployed ransomware linked to DragonForce and Scattered Spider groups, compromising names, addresses, dates of birth, and order histories but not complete payment card details.
- M&S confirmed nearly 9.4 million customer records were affected, assuring no usable card or login details were stolen and urging password resets and multifactor authentication.
- The attacks caused stock shortages, paused deliveries, and financial losses estimated above £40 million weekly, with companies and authorities working on recovery amid warnings of continued retail cyber risks.
29 Articles
29 Articles
Tech expert reveals five urgent actions M&S shoppers must take after major data breach
A tech expert has sent out a stark warning for M&S customers after it was revealed that hackers stole their personal details in the recent cyber-attack that puts shoppers at risk of identity theft and emptied bank accounts.
M&S cyberattack: how can retailers regain customers’ trust after a hack? A marketing expert explains
Several big British retailers have been in the news recently – but not for buoyant sales or new product launches. Firms like Marks & Spencer and Co-op have been hacked, affecting online sales and the range of products available in-store, and forcing them to apologise to customers and other stakeholders. Luxury retailer Harrods also suffered a near-miss. M&S, a legacy retailer that has more than 1,000 stores across the UK, appears to have suffere…
Reasons M&S and Co-op were hacked - and why more retailers might be next
Cyber experts have told Metro they aren’t exactly surprised that supermarkets like M&S were the victims of a hack (Picture: Getty Images) Marks & Spencer (M&S). Co-op. Harrods. Dior. A government legal aid office. A food distributor that supplies Tesco, Sainsbury’s and Aldi. A raft of retailers and suppliers have been the targets of cyber incidents in recent weeks. Today alone, it has emerged that the logistics firm Peter Green Chilled and the D…
A group of hackers under 20 has launched one of the most dangerous cyberattacks on the sales giant Marks & Spencer with millions of losses.
Coverage Details
Bias Distribution
- 63% of the sources are Center
To view factuality data please Upgrade to Premium