US Edition‘No honour among thieves’: M&S hacking group starts turf war
UNITED STATES, JUL 7 – DragonForce and RansomHub compete to extort overlapping victims with double extortion tactics, with RansomHub reporting about 500 victims in 2024, cybersecurity firm Group-IB said.
- Marks & Spencer faced a cyberattack on April 17, 2025, forcing it to suspend online clothing orders for 46 days and disrupt other systems in the UK.
- The attack began with a sophisticated impersonation and is believed to have involved DragonForce, a ransomware group based in Asia amid rising gang conflicts.
- The disruption led to empty shelves, reduced food availability, higher waste, and logistics costs, causing about £300 million in lost operating profit while M&S remains in rebuild mode.
- Cybercrime analysts warn that instability among extortion groups like DragonForce and RansomHub risks double extortion attempts, as Jake Moore called it a “Wild West, lawless environment.”
- M&S counsel Nick Folland advised businesses to prepare to operate without IT systems, stressing that companies should be able to run on pen and paper during cyber crises.
12 Articles
12 Articles
M&S cyberattack was carried out by 'DragonForce', chairman says
LONDON :British retailer Marks & Spencer believes the instigator of the cyberattack which forced it to suspend online shopping for six weeks in April and May was a group called "DragonForce", chairman Archie Norman told lawmakers on Tuesday.
“No honor among thieves”: M&S hacking group starts turf war
The ransomware group linked to the recent cyberattacks on UK retailers Marks and Spencer, Harrods, and the Co-Op has begun a turf war with its rivals, triggering a battle within the industry that could bring more hacks and further fallout for corporate victims. DragonForce, a group of largely Russian-speaking cyber criminals behind a spate of high-profile attacks this year, has clashed with one of its biggest competitors RansomHub, according to …
M&S chair: UK needs to muscle up to tackle cyber threats
Marks and Spencer chair Archie Norman has said the UK is probably underresourced to tackle cyber threats and needs to boost its security level to encourage investment. Speaking to lawmakers on Tuesday, Norman said that the UK is “just not resourced up to operate at [the US] level.” “It’s very advantageous if we in this country have leading cyber security experts, because we have a cyber services industry,” he said, adding that it should be “our …
Coverage Details
Bias Distribution
- 100% of the sources are Center
To view factuality data please Upgrade to Premium
