UK Arrests Woman and Three Men for Cyberattacks on M&S Co-op and Harrods

Four suspects arrested by the NCA in April/May 2025 cyberattacks on M&S, Co-op, and Harrods. Learn about the social engineering, ransomware disruption, and estimated £300M impact on M&S.

In a major development, the UK’s National Crime Agency (NCA) has announced the arrest of four individuals in connection with a series of cyberattacks that impacted major UK retailers Marks & Spencer (M&S), Co-op Group, and Harrods in April and May 2025. These arrests mark a crucial step in an ongoing investigation that remains a top priority for the agency.

The Attacks and Their Impact

The cyber criminals gained access to the retailers’ computer systems through aggressive social engineering tactics, which involve manipulating individuals to gain confidential information or access. This likely involved exploiting a common third-party supplier. The attacks caused considerable disruption, particularly for M&S, which saw its online shopping suspended and food deliveries affected. Even nearly three months ...