Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages

The April 2025 cyber attacks targeting U.K. retailers Marks & Spencer and Co-op have been classified as a « single combined cyber event. »
That’s according to an assessment from the Cyber Monitoring Centre (CMC), a U.K.-based independent, non-profit body set up by the insurance industry to categorize major cyber events.
« Given that one threat actor claimed responsibility for both M&S and

The April 2025 cyber attacks targeting U.K. retailers Marks & Spencer and Co-op have been classified as a « single combined cyber event. »
That’s according to an assessment from the Cyber Monitoring Centre (CMC), a U.K.-based independent, non-profit body set up by the insurance industry to categorize major cyber events.
« Given that one threat actor claimed responsibility for both M&S and