Cyber Risk in Retail: What the M&S and Co-op Ransomware Attacks Mean for Cyber Insurance
Retail has found itself in the cyber crosshairs in recent weeks - what key lessons need to be learned?
Two recent ransomware attacks on major UK retailers have underscored the growing cyber risk in retail and e-commerce - and the critical role cyber insurance professionals play in managing that risk. With Marks & Spencer (M&S) and Co-op falling victim to sophisticated threat actors, the message to underwriters, brokers, and claims handlers is clear: the retail threat landscape is evolving rapidly, and insurance strategy must evolve with it.
What Happened: M&S and Co-op Under Attack
Marks & Spencer (M&S):
The attack on M&S involved the deployment of DragonForce ransomware, but attribution points toward Scattered Spider - a decentralized threat group known for its high-profile breaches of MGM Resorts and Caesars Entertainment in 2023. The group, made up largely of young, English-speaking members from the US and UK, has demonstrated a talent for social engineering and MFA bombing. Despite arrests in early 2024, Scattered Spider remains active, adaptive, and dangerous.
Read the rest with a free account
The library is open to anyone with an account — articles, white papers, market updates and the masterclass archive. It is free, there is no time limit, and nothing renews.
Already have one? Sign in
More from Case Studies
Top 6 Cyber Attacks in 2023
Cyber Attacks in 2023 have been large-scale and jam-packed with financial loss, personal information leaks in the millions, and business interruption.
5 Cyberattacks That Changed the World
We've compiled a list of cyber incidents that every cyber insurance professional needs to know.
Insurance Pros, Beware the BazarCall
A sharp uptick in incidents involving this cyber attack method should be putting cyber insurers on alert. Let’s uncover the key points that cyber insurance professionals should note.