Retail hackers believed to be young and from US and UK, detectives say
Published: 5/21/2025

The National Crime Agency suspects that the cyber attacks on UK retailers, like M&S and Co-op, are linked to the young and native English-speaking cyber-criminal group, Scattered Spider, believed to be based in the US and UK. The NCA is actively investigating this connection and working to identify the hackers responsible for the disruptions and data theft. The attacks have used the DragonForce platform for ransomware activities, causing significant damage to retail operations and customer data, with ongoing disruptions likely until July.