Four Arrested in £440M Cyber Attack on Major UK Retailers

Four Arrested in £440M Cyber Attack on Major UK Retailers
In a significant development, UK authorities have arrested four individuals in connection with a massive cyber attack that targeted major retailers Marks & Spencer, Co-op, and Harrods. The attack, which reportedly caused up to £440 million in damages, has raised serious concerns about the vulnerability of large businesses to ransomware and other forms of cybercrime.

Harrods hit by cyber attack following incidents at Marks and Spencer's ...
Details of the Cyber Attack and Arrests
The UK's National Crime Agency (NCA) made the arrests, targeting individuals aged between 17 and 20. The suspects are believed to be connected to the hacking collective Scattered Spider. The cyber assault, which occurred in April 2025, severely disrupted operations at Marks & Spencer, Co-op, and Harrods.
- The attack is estimated to have caused up to £440 million in damages.
- The suspects are aged between 17 and 20.
- The NCA is investigating the full extent of the damage and the methods used in the attack.
Impact on Retailers and Customers
The cyber attack had a significant impact on the affected retailers. Marks & Spencer reported a loss of approximately £300 million due to the "highly sophisticated" attack. The disruption affected online services, supply chains, and in-store operations.
Customers may have experienced:
- Delays in order fulfillment.
- Disruptions to online services.
- Potential exposure of personal data (though authorities have not confirmed data breaches).
What’s Next?
The investigation is ongoing, and authorities are working to determine the full scope of the attack and bring all those responsible to justice. Businesses are urged to strengthen their cybersecurity measures to protect against similar threats.