Here is the rewritten content without changing its meaning, retaining the original length, and keeping proper headings and titles as required:
UK retail giant Marks & Spencer (M&S) has announced that a cyberattack has compromised some personal customer data, which has disrupted its online operations for over three weeks.
The incident, which led to the suspension of online orders on April 25, has been attributed to the sophisticated nature of the attack. While payment and password information remains secure, some personal details were accessed. M&S is notifying affected customers and working to restore its systems.
M&S has stated that the compromised data does not include usable payment or card details, which the company does not store on its systems, and does not include account passwords. Moreover, there is no evidence to suggest that this data has been shared.
Despite the cyber incident, M&S’s 1,000 physical stores in the UK remain open. However, the company’s share price has dropped 15% since the problems began over the Easter weekend. M&S is collaborating with cybersecurity experts, law enforcement, and government agencies to secure its systems and restore operations.
Who’s Behind the Attack?
According to The Standard, the breach is believed to have been carried out by Scattered Spider — a notorious cybercriminal group also known as UNC3944, Star Fraud, Octo Tempest, Scatter Swine, and Muddled Libra.
The group is reportedly composed of hundreds of English-speaking hackers, many believed to be based in the UK and the U.S. Scattered Spider gained notoriety in September 2023 after breaching casino giants Caesars Entertainment and MGM Resorts International. Caesars reportedly paid a $15 million ransom to recover critical systems.
The UK ringleader is alleged to be Tyler Buchanan, a 23-year-old from Dundee, while U.S. operations were reportedly led by Noah Urban, also known as “King Bob.” Buchanan, who used the alias Tylerb on encrypted messaging app Telegram, was photographed in handcuffs in Spain last summer and extradited to California in April 2025, according to the report.
Source Link
