Overview

• Marks & Spencer remains unable to process online orders and has paused recruitment after a ransomware attack disrupted its core digital operations starting in late April.
• The Metropolitan Police, National Crime Agency, and National Cyber Security Centre are investigating, with experts linking the attack to the Scattered Spider hacking group.
• Harrods and Co-op have implemented precautionary IT restrictions following separate cyber incidents, raising concerns about a broader wave of retail sector attacks.
• The attack has cost M&S over £700 million in market value and halted an estimated £3.8 million in daily online revenue, with some in-store product availability also affected.
• The NCSC has urged businesses to strengthen cybersecurity measures, calling the attacks a wake-up call for the retail sector to bolster defenses against rising threats.