Apr 22, 2025
1 new incident, 0 with updates.
Started
- ClosedCriticalNo fix needed
Marks & Spencer ransomware (Scattered Spider / DragonForce) halts online orders for 46 days
Scattered Spider got in through social engineering of a third-party IT provider and encrypted M&S's VMware ESXi hosts with DragonForce ransomware over Easter 2025. Contactless payments, Click & Collect and online ordering broke; online orders were paused from April 25 to June 10. M&S put the hit at about £300M of operating profit.
Marks & Spencer (retail IT, VMware ESXi)Closed Jun 10, 2025
