Co-op and Marks & Spencer Cyberattacks Expose 20 Million Customers, Cause £1 Billion Losses, Suspend Card Payments

15 posts • GPT (4.1 mini)

Updated May 7, 2025, 04:51 AM

British retailers including Co-op and Marks & Spencer (M&S) have been targeted by a series of cyberattacks attributed to a ransomware group known as UNC3944 or Scattered Spider. The Co-op suffered a breach that exposed the personal data of 20 million customers, leading to apologies from the company and warnings from experts about long-term scam risks. The cyberattacks have caused operational disruptions, with Co-op stores experiencing empty shelves and suspending card payments at around 200 locations across the UK. M&S has reported losses reaching £1 billion due to the attacks, which have also affected meal deal offers and caused staff to resort to sleeping in offices amid chaotic conditions. The attackers reportedly used social engineering tactics, including tricking IT help desk workers into resetting passwords. Deputy Information Commissioner Stephen Bonner recommended implementing multi-factor authentication to prevent such attacks. The incidents have prompted scrutiny of retailer preparedness for cyber threats, with government officials urging businesses across the UK to strengthen their cybersecurity measures. Additional malware campaigns targeting HR professionals have also been reported, highlighting ongoing threats in the retail sector.

More breaking stories on DeepNewz — updated live.