M&S hackers believed to have gained access through third party
- Marks & Spencer and Co-op suffered cyberattacks in early May 2025 that disrupted systems and led to stolen customer personal data in the UK.
- Attackers accessed M&S systems through social-engineering targeting a third-party contractor, remaining undetected inside for over two days.
- Hackers deployed ransomware linked to DragonForce and Scattered Spider groups, compromising names, addresses, dates of birth, and order histories but not complete payment card details.
- M&S confirmed nearly 9.4 million customer records were affected, assuring no usable card or login details were stolen and urging password resets and multifactor authentication.
- The attacks caused stock shortages, paused deliveries, and financial losses estimated above £40 million weekly, with companies and authorities working on recovery amid warnings of continued retail cyber risks.
29 Articles
29 Articles
Tech expert reveals five urgent actions M&S shoppers must take after major data breach
A tech expert has sent out a stark warning for M&S customers after it was revealed that hackers stole their personal details in the recent cyber-attack that puts shoppers at risk of identity theft and emptied bank accounts.
M&S cyberattack: how can retailers regain customers’ trust after a hack? A marketing expert explains
Several big British retailers have been in the news recently – but not for buoyant sales or new product launches. Firms like Marks & Spencer and Co-op have been hacked, affecting online sales and the range of products available in-store, and forcing them to apologise to customers and other stakeholders. Luxury retailer Harrods also suffered a near-miss. M&S, a legacy retailer that has more than 1,000 stores across the UK, appears to have suffere…
Reasons M&S and Co-op were hacked - and why more retailers might be next
Cyber experts have told Metro they aren’t exactly surprised that supermarkets like M&S were the victims of a hack (Picture: Getty Images) Marks & Spencer (M&S). Co-op. Harrods. Dior. A government legal aid office. A food distributor that supplies Tesco, Sainsbury’s and Aldi. A raft of retailers and suppliers have been the targets of cyber incidents in recent weeks. Today alone, it has emerged that the logistics firm Peter Green Chilled and the D…
Coverage Details
Bias Distribution
- 63% of the sources are Center
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage