Co-op Prevents Major Ransomware Attack While M&S Struggles with Cyber Fallout

The Co-operative Group narrowly avoided a severe ransomware attack that could have caused extensive damage to its systems, according to hackers who contacted the BBC. While both Co-op and Marks & Spencer (M&S) were targeted, Co-op managed to detect and stop the ransomware in time, opting for an immediate shutdown to limit damage. This decision, though disruptive, likely helped Co-op recover more quickly compared to M&S, which continues to face issues with online orders, payment systems, and stock shortages weeks after the breach. Hackers claiming responsibility, operating under the name DragonForce, say they infiltrated Co-op’s systems undetected for a while but failed to launch their full ransomware payload. Cyber experts have praised Co-op’s swift and strategic response, noting that it likely prevented long-term damage. In contrast, M&S appears to have suffered a deeper compromise, with customer data stolen and ongoing operational challenges. Analysts estimate the cyberattack is costing M&S around £43 million per week. The same hacking group also claims to have attempted attacks on Harrods. Authorities are concerned that this may be part of a broader campaign by loosely organized, English-speaking hackers known as Scattered Spider or Octo Tempest. Rebuilding consumer trust remains a key challenge for affected retailers.