Hackers Target Co-op as Police Investigate Major Cyber Attack on M&S

In a concerning development for the UK retail sector, hackers have recently targeted the Co-operative Group (Co-op), just days after a major cyber attack disrupted operations at Marks & Spencer (M&S). These back-to-back incidents have raised serious questions about cybersecurity across large British retailers, prompting police and government agencies to investigate possible links between the two attacks.

The retailer says it’s disabled parts of its IT systems in response to the incident

What Happened at Co-op?

The Co-op, one of the UK’s largest retail and funeral care businesses, confirmed that it was the target of a cyber attack attempt. In response, the company took swift action by shutting down parts of its internal IT systems to prevent the attackers from gaining access.

While Co-op stores remained open and customers could shop as usual, the incident did affect several back-office functions. This included stock tracking, internal communication, and customer service lines. The disruption has made it harder for staff to restock shelves and respond to customer queries, though no customer data is believed to have been compromised.

A spokesperson for Co-op stated:

“We identified an attempted cyber attack and acted quickly to shut down part of our IT network. The safety of our systems and protection of our customers’ data is our top priority.”

Major Cyber Attack at M&S

The cyber attack on Marks & Spencer, one of the UK’s most well-known high street brands, was far more serious. Starting around April 19, 2025, hackers were able to breach critical parts of M&S’s internal systems. The company was forced to shut down several IT services, which caused widespread disruption across both online and in-store operations.

Customers began to notice product shortages in some M&S food halls and experienced delays or issues placing online orders. M&S acknowledged the attack and confirmed that law enforcement, including the National Cyber Security Centre (NCSC) and the Metropolitan Police’s cybercrime unit, had launched an investigation.

Early reports suggest that a sophisticated hacker group known as “Scattered Spider” may be behind the attack. This group is known for using social engineering — a method that tricks employees into giving up login details or access codes — to breach secure networks.

Are the Two Attacks Connected?

The timing and nature of these cyber incidents have led cybersecurity experts and law enforcement to explore whether the attacks on Co-op and M&S are connected. Though there is no official confirmation yet, the possibility of a coordinated campaign targeting UK retailers is being taken seriously.

A government cybersecurity official commented:

“Retailers are increasingly being targeted because they manage large volumes of data and depend heavily on IT systems. If attackers can disrupt these systems, they can demand ransoms or sell stolen information.”

The NCSC is now advising all major UK retailers to review their digital security and ensure employees are trained to recognize cyber threats, such as phishing emails and fake login pages.

Why Retailers Are at Risk

Retail businesses have become more dependent on technology than ever. From stock management and payment systems to online shopping platforms, nearly every aspect of retail now runs through digital systems. While this has improved efficiency, it has also opened up more opportunities for cybercriminals.

Attackers often look for weak spots in a company’s systems or exploit human error. For example, an employee might accidentally open a fake email attachment that installs malware. Once inside a network, hackers can steal data, lock up systems, or cause chaos — sometimes demanding payment in return for restoring access.

According to cybersecurity firm Sophos, retail businesses saw a 63% rise in ransomware attacks globally in the last year alone.

How Co-op and M&S Are Responding

Both Co-op and M&S are working closely with authorities to investigate the attacks. M&S has not yet revealed if any sensitive data was compromised, while Co-op insists that customer data remains secure.

Experts say both companies acted quickly to shut down systems, which may have prevented even more damage. However, the disruptions show just how vulnerable businesses can be if cybersecurity is not continuously updated and tested.

What Shoppers Should Know

For now, customers of Co-op and M&S can continue shopping, although some stores may experience limited stock or slower service. There is no need to panic or avoid using these retailers — both are taking all necessary steps to protect customer data and restore full service.

Still, experts suggest consumers take basic precautions, such as monitoring their bank accounts, using strong passwords, and being alert for any suspicious emails or texts pretending to be from retailers.

Conclusion

The cyber attacks on Co-op and M&S are a wake-up call for the retail industry in the UK. As hackers grow more advanced, it’s vital that companies invest in strong cybersecurity systems and train their staff to handle threats. With investigations ongoing and more information expected soon, both businesses and shoppers are reminded of the importance of staying vigilant in the digital age.

https://shortworld24.com/will-uk-break-heat-records-for-start-of-may-and-will-it-last/