Breachesby GlyphMarks & Spencer
Disclosed Apr 22, 2025Unverified
Scattered Spider cyberattack on M&S steals customer data, halts online sales
Marks & Spencer disclosed a cyber incident in April 2025 that disrupted stores and halted online orders, later confirming customer names, birth dates, contact details and order histories were stolen and forcing password resets. The attack was attributed to Scattered Spider and began with social engineering.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Apr 22, 2025 |
| Attack | Ransomware |
| Data exposed | NamesDates of birthAddressesEmailsPhone numbersOther |
| Sector | Retail · GB |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.