// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Marks & Spencer
Breach Record

Marks & Spencer

DISCLOSED 2026-09-08 · RANSOMWARE · RANSOMWARE

The DragonForce ransomware group breached UK retailer Marks & Spencer, causing significant financial impact. The attack reduced the company's statutory profit from £391.4 million to £3.4 million and incurred approximately £136 million in direct response expenses.

The record

What we know

Disclosed
2026-09-08
Attack vector
Ransomware
Sector
retail
Country
UK
RANSOMWARE
Sources

Cited reporting

↗ www.dexpose.io
Similar vector · recent

Other ransomware breaches on file

Novocure · 2026-09-08 Nutex Health · 2026-09-08 DaVita · 2026-09-08 Mega Velocity · 2026-09-08 Stransky Heiz-Mess-Regeltechnik GmbH · 2026-09-07 Engefitas · 2026-09-06 McLaren Health Care · 2026-09-05 Engefitas · 2026-09-05

This page is the permanent ColdRecon entry for the Marks & Spencer disclosure. It updates if new public reporting emerges. All tracked breaches →

Marks & Spencer just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →