Marks & Spencer experienced a massive cyberattack that completely halted its online operations, including website and app transaction processing. While customers could still browse products, all new orders were suspended as a precautionary measure stores remained open for in-person shopping.
The breach, which began during the Easter weekend, also disrupted click-and-collect services, contactless payments, and other in-store functionalities. M&S relied on manual processes to keep certain operations running while experts investigated the incident
It was later confirmed that the attack was a ransomware incident orchestrated by the Scattered Spider group, who exploited social engineering tactics posing as legitimate employees to trick a third-party service provider into granting access credentials.
The consequences were substantial: M&S faced estimated losses of around \u00a3300 million (approximately US$400 million), making this one of the costliest cyber-incidents in UK retail history.<\/p>\n","protected":false},"excerpt":{"rendered":"
Marks & Spencer experienced a massive cyberattack that completely halted its online operations, including website and app transaction processing. While customers could still browse products, all new orders were suspended as a precautionary measure stores remained open for in-person shopping.The breach, which began during the Easter weekend, also disrupted click-and-collect services, contactless payments, and other in-store functionalities. M&S relied on [\u2026]<\/span><\/p>\n","protected":false},"author":1,"featured_media":8905,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226,6,12,9,2],"tags":[],"class_list":["post-8904","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finance-and-legal","category-latest_news","category-read_article","category-ransomware_criminals","category-ce_news"],"acf":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/cyberenso.jp\/wp-content\/uploads\/2025\/09\/ftcms_8193dd1d-06c3-4c6f-b2c9-b54808d72067.jpg?fit=700%2C394&ssl=1","_links":{"self":[{"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/posts\/8904"}],"collection":[{"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/comments?post=8904"}],"version-history":[{"count":1,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/posts\/8904\/revisions"}],"predecessor-version":[{"id":8907,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/posts\/8904\/revisions\/8907"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/media\/8905"}],"wp:attachment":[{"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/media?parent=8904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/categories?post=8904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cyberenso.jp\/en\/wp-json\/wp\/v2\/tags?post=8904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}