On April 17, 2025, Marks & Spencer, one of the UK’s largest and most popular retail names, was hit by a major ransomware attack. It’s been rumoured that the notorious Scattered Spider collective had a hand in this – the same group that many have theorised holds responsibility for the Harrods breach. Four arrests have been made in the UK, but for M&S, the story is still unfolding. The consequences of this data breach are set to echo through its operations, finances, and brand for months, if not years.