M&S chief says cyber attack likely instigated by ex-computer gamers

TechnologyBusiness & Finance
8 Jul 2025 • 10:37 PM MYT
The Independent
The Independent

The world’s most free-thinking newspaper

image is not available

  • Marks & Spencer's chairman, Archie Norman, described a cyber attack on the retailer as "traumatic", attributing it to hacking group Scattered Spider and ransomware operation DragonForce.
  • The attack, which began in late April, left M&S unable to take online orders for over six weeks, causing significant operational disruption.
  • Appearing before MPs, Mr Norman refused to confirm if M&S paid a ransom following the incident, stating that the damage had largely been done.
  • M&S estimates the cyber attack will cost around £300 million in lost profits, though it anticipates recovering up to half through cost management and insurance.
  • DragonForce, the ransomware operation involved, is believed to be based in Asia and composed of former computer gamers.

IN FULL