M&S thinks it might finally know what caused cyberattack - but still won't say if it paid a ransom

• M&S chairman Archie Norman attributes recent ransomware attack to DragonForce
• Law enforcement is still involved, and we don't know any ransom details
• Norman is calling for greater transparency and cyberattack reporting

M&S is still refusing to confirm whether it paid a ransom following a recent major cyberattack, but at least we have an indication of its cause.

It's believed the attack was carried out by DragonForce, a ransomware operation believed to be based in Asia or Russia – a separate group from hacktivists at the similarly-named DragonForce Malaysia.

M&S chairman Archie Norman explained disclosing details of any ransom would not be in the public interest, given that law enforcement agencies are still involved with the case.

M&S shares more information on attack

"We’ve said that we are not discussing any of the details of our interaction with the threat actor," Norman, speaking at a UK Parliament ...