The Story cover image

The Story

Who's behind the M&S cyber attack?

May 7, 2025
Join Mark Sellman, Technology Correspondent for The Times, as he delves into the world of cybercrime and the notorious group Scattered Spider. He reveals how this group orchestrated significant attacks on major retailers, including Marks and Spencer, using tactics like social engineering and SIM swapping. Sellers discusses the financial repercussions of these cyberattacks, effective defense strategies for businesses, and the critical importance of cybersecurity in our interconnected world for protecting personal data.
26:57

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • The Scattered Spider hacker collective employs social engineering techniques, complicating corporate cybersecurity efforts and highlighting a need for stronger defenses.
  • Cyber attacks have profound operational and reputational consequences for retailers like Marks & Spencer, necessitating a dual strategy of prevention and recovery.

Deep dives

The Scattered Spider Group's Emergence

Scattered Spider, a hacker collective mainly consisting of young males from the U.S. and the U.K., has gained notoriety for its cybercriminal activities, including high-profile hacks like those of Las Vegas casinos. Characterized by their loose online collaboration, members may not even know one another yet share a common goal of extorting money through cyber attacks. Recent activities have spotlighted their aggressive methods, which led to disruptions at Marks & Spencer and other retailers, causing multi-million pound losses. The group's adaptability and anonymity make them particularly challenging to combat, as they often operate under various aliases and leverage social engineering techniques to bypass corporate cybersecurity measures.

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
App store bannerPlay store banner