Teenage Gang Linked to Hacking of Casino Giant Targets M&S Causing Chaos

_{The hacking group Scattered Spider is considered one of the most aggressive cybercrime rings operating today. (Image: jvphoto / Alamy)}

Marks & Spencer (M&S), known for its luxury foods and clothing range, has recently fallen victim to a significant cyber attack orchestrated by a group of teenage hackers known as 'Scattered Spider.'

The incident forced the retail giant to suspend its online sales, which make up a substantial portion of its daily revenue, resulting in a staggering £500 million drop in share prices.

The attack disrupted M&S operations and echoed a similar assault on land-based casinos, MGM Resorts International and Caesars Entertainment. 

Reports in the Telegraph and the MailOnline indicate that the same hacking tools, developed by Russian-linked groups BlackCat and ALPHV, may have been employed in both scenarios, suggesting a potential collaboration.

Cyber Attack Allegedly by UK and US Teenage Gang

M&S has reported that the cyber intrusion has severely locked down numerous systems within the company. Some local stores have experienced empty shelves due to interrupted deliveries and payment processing.

Cybersecurity experts have traced the attackers to the UK and the US, with "Scattered Spider" being described as "one of the most prevalent and aggressive threat actors" by Charles Carmakal, Chief Technology Officer at Mandiant Intelligence. 

The group was previously identified as the force behind a devastating attack on MGM Resorts.

Carmakal noted that many members of the group are native English speakers, enhancing their effectiveness in social engineering tactics, which manipulate human targets, including over the phone.

Retail Giant Struggling to Get Back to Normal

In a statement, an M&S spokesperson confirmed: "As part of our proactive management of the incident, we took a decision to take some of our systems temporarily offline. 

"As a result, we currently have pockets of limited availability in some stores. We are working hard to get availability back to normal across the estate."

The company has emphasised that the temporary halt on orders is part of its response strategy for the cyber incident, though it has not provided a timeline for restoring full services.

Investors’ Worries at Losses as a Result of Cyber Attack

Investor sentiment has turned cautious, with Jane Foley, head of FX strategy at Rabobank, expressing concern over potential losses. "Around £700m has been wiped off the value of Marks & Spencer on the stock market," she told BBC Radio 4. "They need to deliver some positive news promptly to alleviate investor anxiety."

Nicholas Found from Retail Economics estimated that the prolonged outage of digital channels could be costing M&S up to seven figures per day.

As the incident unfolds, M&S continues to focus on restoring stability to its operations while navigating the challenges posed by increasingly sophisticated cyber threats.