Harrods, Marks & Spencer, Co-Op and British Horseracing Authority: British Horseracing Authority hit by ransomware

UK Organizations Face Rising Ransomware Threats as Cyberattacks Intensify

The British Horseracing Authority (BHA) became the latest UK organization to suffer a ransomware attack in early June 2025, compromising multiple servers within its IT infrastructure. While core racing operations and general administration remained unaffected, the incident forced some IT staff to work remotely as authorities worked to contain the breach. The responsible ransomware group has not been identified, with details kept confidential for security reasons.

The attack is part of a broader surge in cyber threats targeting Western entities, particularly in the UK. Recent victims include retail giants Marks & Spencer, which fell to the DragonForce ransomware and took five weeks to recover, as well as Co-Op and Harrods, both hit in the past two months. Cybercriminals are increasingly drawn to Western organizations due to two key factors: financial incentives businesses in these regions are more likely to pay ransoms to avoid operational collapse and perceived security gaps, where weak defenses make breaches easier and more profitable.

Ransomware tactics have also grown more aggressive. Beyond encrypting data, attackers now employ double extortion, stealing sensitive information before locking systems and threatening to leak it on the dark web if demands aren’t met. In rare cases, they escalate to triple extortion, targeting victims’ customers and partners to inflict reputational damage.

As cyber threats evolve in sophistication, the long-term impact on businesses and public institutions remains a pressing concern. The BHA incident underscores the escalating risks faced by organizations across sectors, with no clear resolution in sight.

Source: https://www.cybersecurity-insiders.com/british-horseracing-authority-hit-by-ransomware/

Harrods cybersecurity rating report: https://www.rankiteo.com/company/harrods

Marks and Spencer cybersecurity rating report: https://www.rankiteo.com/company/marks-and-spencer

Co-op cybersecurity rating report: https://www.rankiteo.com/company/the-co-op-group

British Horseracing Authority cybersecurity rating report: https://www.rankiteo.com/company/british-horseracing-authority

"id": "HARMARTHEBRI1769526687",
"linkid": "harrods, marks-and-spencer, the-co-op-group, british-horseracing-authority",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Sports/Entertainment',
                        'location': 'United Kingdom',
                        'name': 'British Horseracing Authority (BHA)',
                        'type': 'Sports Governing Body'}],
 'data_breach': {'data_encryption': True},
 'date_detected': '2025-06-XX',
 'description': 'The British Horseracing Authority (BHA) suffered a ransomware '
                'attack in early June 2025, compromising multiple servers '
                'within its IT infrastructure. Core racing operations and '
                'general administration remained unaffected, but some IT staff '
                'were forced to work remotely during containment efforts. The '
                'responsible ransomware group has not been identified.',
 'impact': {'data_compromised': True,
            'operational_impact': 'IT staff worked remotely during containment',
            'systems_affected': 'Multiple servers within IT infrastructure'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial gain, exploitation of perceived security gaps',
 'ransomware': {'data_encryption': True},
 'references': [{'date_accessed': '2025-06-XX',
                 'source': 'Cyber Incident Report'}],
 'response': {'containment_measures': 'IT staff worked remotely to contain the '
                                      'breach'},
 'title': 'British Horseracing Authority (BHA) Ransomware Attack',
 'type': 'Ransomware'}