The Cyber Monitoring Centre has categorised the disruption to retailers M&S and Co-op following the April 2025 cyber incident as a Category 2 systemic event. In its first live public assessment of a cyber incident's financial impact in the UK, the CMC estimates the ransomware attack on the two retailers and associated parties cost somewhere between £270m and £440m.