A secretive hacking group called DragonForce has claimed responsibility for the devastating cyber attacks crippling some of Britain’s best-known retailers, warning that the chaos is “just the start.”
The cybercriminal network, which may be linked to the notorious Scattered Spider gang of teenage hackers, says it launched attacks on Marks & Spencer (M&S), the Co-op, and Harrods, stealing millions of customers’ data and demanding multimillion-pound ransoms.
In an interview with Bloomberg, members of DragonForce issued a chilling threat: if ransom payments are not made, they will leak stolen data online. DragonForce reportedly operates like a criminal cartel, selling hacking tools to affiliates, and claims it had more than 90 corporate victims last year across multiple sectors.
Retailers on Red Alert
The news comes as Co-op confirmed that hackers accessed customer names and contact details, while the Information Commissioner’s Office (ICO) warned that similar breaches could have occurred at M&S.
Harrods also reported being targeted earlier this week, raising concerns among industry experts about the threat of copycat hacks.
A spokesperson from the ICO said:
“Seeing cyber attacks in the news can be concerning. If you are a customer, we urge you to use strong, unique passwords and check for updates from your retailer.
Meanwhile, M&S CEO Stuart Machin apologized to customers after online services remained severely disrupted for nearly two weeks since the Easter weekend, costing millions in lost sales.
Despite the apology, M&S has not confirmed whether customer data has been compromised.
Political Response
Pat McFadden, Chancellor of the Duchy of Lancaster, is expected to address the CyberUK conference next week, warning companies that cyber threats are “relentless” and urging businesses to make cybersecurity an “absolute priority.
Security experts are emphasizing the critical need for companies to strengthen defenses as attacks from sophisticated criminal networks intensify across the UK economy.
What Customers Should Do
Customers of affected retailers are advised to:
- Use <strong>strong, unique passwords for different accounts
- Monitor financial statements closely for any suspicious activity
- Follow advice issued by M&S, Co-op, or Harrods if their data is confirmed to be at risk
The ICO also recommends visiting their official website for advice and updates.