The chairman of Marks & Spencer in the UK refused to reveal if the company paid a hacking group after a ransomware attack earlier this year. Archie Norman, the chairman, stated that they are not discussing details of their interaction with the threat actor, citing law enforcement reasons. He mentioned that nobody at Marks & Spencer directly communicated with the cybercriminals, who are believed to be the gang DragonForce.
Customer data, including personal information like names, addresses, and order histories, was stolen during the breach. This incident caused disruptions in operations, leading to empty shelves and online ordering issues. Norman informed lawmakers that the company is still in the process of recovery, which is expected to continue until October or November.
