--- title: Marks & Spencer Faces Cyberattack: Customer Data Compromised description: The Scattered Spider cybercriminal group, known for attacking UK retailers, is now targeting the US retail sector using DragonForce ransomware and tactics like... canonical: https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Marks & Spencer Faces Cyberattack: Customer Data Compromised | daily.dev og:description: The Scattered Spider cybercriminal group, known for attacking UK retailers, is now targeting the US retail sector using DragonForce ransomware and tactics like... og:url: https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu og:image: https://api.daily.dev/og/posts/PN0UoBXfU.png og:image:alt: Marks & Spencer Faces Cyberattack: Customer Data Compromised og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Marks & Spencer Faces Cyberattack: Customer Data Compromised **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary The Scattered Spider cybercriminal group, known for attacking UK retailers, is now targeting the US retail sector using DragonForce ransomware and tactics like SIM swapping and phishing. Experts emphasize the importance of improving cloud security and raising user awareness. A notable incident involved Marks & Spencer, where customer data was stolen, leading to service disruptions. US and UK retailers are advised to strengthen their cybersecurity frameworks to counter these advanced threats. ## Content A cybercriminal group known as Scattered Spider, previously responsible for cyberattacks on UK retailers like Marks & Spencer, is now targeting the US retail sector. Utilizing DragonForce ransomware, Scattered Spider employs sophisticated tactics such as SIM swapping and phishing to infiltrate security systems. These attacks are particularly aimed at industries where downtime results in significant financial and reputational damage. Experts, including those from Google's Mandiant, stress the importance of enhancing cloud security and user awareness to counter these advanced threats. Mandiant has offered a free guide for businesses to bolster their cybersecurity defenses. Given the nature of Scattered Spider's tactics, even mature security programs can be at risk, making vigilance crucial for US retailers. In the incident involving Marks & Spencer, the attack led to the theft of customer data, although no financial details were compromised. This breach resulted in service disruptions and potential reputational damage, prompting the retailer to consider a £100 million insurance claim. Market analysts highlight the necessity for companies to adapt to evolving cybersecurity challenges and the associated costs of insurance claims related to such breaches. Given the increasing sophistication and reach of Scattered Spider, both the UK and US retail sectors are urged to reassess and strengthen their cybersecurity frameworks to mitigate the risks posed by these aggressive and creative hackers. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware), [#phishing](https://daily.dev/tags/phishing), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Marks & Spencer Faces Cyberattack: Customer Data Compromised","url":"https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu"},"datePublished":"2025-05-14T14:39:27.746Z","dateModified":"2025-05-15T17:34:57.628Z","description":"The Scattered Spider cybercriminal group, known for attacking UK retailers, is now targeting the US retail sector using DragonForce ransomware and tactics like...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2cd35f586056614c0b02526cfe12297a?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2cd35f586056614c0b02526cfe12297a?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/marks-spencer-faces-cyberattack-customer-data-compromised-pn0uobxfu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,ransomware,phishing,data-breach","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Marks & Spencer Faces Cyberattack: Customer Data Compromised"}]} ```