M&S hackers sent abusive ransom demand directly to CEO

In Data Breach News
June 06, 2025
M&S hackers sent abusive ransom demand directly to CEO

It is not unusual for ransomware gangs to send threatening emails to the executives of their target. Some send emails that mention personal details about the executives or their families. Others threaten regulator punishment or other consequences of a highly publicized breach. But DragonForce reportedly included their travel itinerary to the target.

As the BBC first reported, after Marks & Spencer was attacked, DragonForce emailed their CEO, Stuart Machin with its demand. Grocery Gazette picks up the story:

The email, sent on 23 April, confirms for the first time that the high street retailer was targeted by a ransomware group, something the business has not yet publicly acknowledged.

The message, seen by the BBC, was sent using the email account of an M&S employee employed by IT contractor Tata Consultancy Services (TCS).

In broken English, the hackers wrote: “We have marched the ways from China all the way to the UK and have mercilessly raped your company and encrypted all the servers.

“The dragon wants to speak to you so please head over to [our darknet website].”

Read more at Grocery Gazette.