M&S cyber-attack linked to hacking group Scattered Spider

theguardian.comPublished: 4/29/2025

Summary

A major cyber-attack on Marks & Spencer (M&S) has been linked to the Scattered Spider hacking collective, previously responsible for attacks on MGM Resorts and US casino operator Caesars. The group, known for its English-speaking members who face legal issues related to crypto theft via phishing, used ransomware to encrypt M&S systems, causing a five-day sales suspension and significant financial disruption. Industry experts warn that the attack highlights the risks of targeted ransomware campaigns aimed at maximizing disruption. M&S is still struggling with store operations, though online shopping remains possible for now.