Home / Incidents / Data breach
M&S confirms customer data taken in crippling cyberattack
The attack halted online orders for weeks, and customers were told their personal data was compromised.
- Organisation
- Marks & Spencer
- Disclosed
- 13 May 2025
- Affected
- Not stated
- Data
- Customer personal data
- Attacker
- DragonForce / Scattered Spider
- Severity
- critical
- Region
- UK
- Source
- CM Alliance monthly roundup ↗
Cite this
Nuffield Consulting, “M&S confirms customer data taken in crippling cyberattack”, The Daily Tech Wire outage & breach log, 13 May 2025. https://techwire.nuffieldconsulting.com/incidents/2025-05-13-marks-spencer-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: CM Alliance monthly roundup, https://www.cm-alliance.com/cybersecurity-blog/may-2025-biggest-cyber-attacks-ransomware-attacks-and-data-breaches.
Related incidents
- 22 Apr 2025M&S cyber attack halts online orders for weeksMarks & Spencer · outage · Cyberattack
- 19 May 2025Legal Aid Agency hack exposes applicants' criminal recordsLegal Aid Agency · breach · Unknown · 2.1M claimed
- 2 May 2025Co-op member data stolen in DragonForce attackCo-op (UK) · breach · DragonForce / Scattered Spider · 6.5M records
- 28 May 2025LexisNexis Risk Solutions discloses December breachLexisNexis Risk Solutions · breach · Unknown · 364K records
- 14 May 2025Bribed insiders leak Coinbase customer dataCoinbase · breach · Unknown