Fri, 06 Jun 2025

Fri, 06 Jun 2025 M&S hackers sent abuse and ransom demand directly to CEO

The criminals told the retailer's boss he could make things "fast and easy" if he complied with their demands.

* The Marks & Spencer hackers, DragonForce, sent an email to M&S CEO Stuart Machin and 7 other executives gloating about their hack and demanding payment.
* The email was sent on April 23rd using a TCS employee's email account and contains racist language.
* The hackers claim to have stolen the private data of millions of customers and have installed ransomware across M&S' IT system.
* M&S has refused to comment on the breach, but it is estimated that the hack has cost the company £300m.
* Online orders remain suspended after the attack, which began in late April and was also linked to a Co-op cyber-attack.
* DragonForce appears to have hacked into an employee's email account using a third-party IT provider, Tata Consultancy Services (TCS).
* The hackers claim to have details about M&S' cyber-insurance policy and are demanding payment.
* It is still unclear who the actual hackers are, but research suggests that they may be affiliated with Scattered Spider, a loose collective of young western hackers.
  >>