The recent cyber attack on Marks & Spencer wasn’t just another headline about hackers targeting a major retailer. It’s become the opening shot in a criminal turf war that’s making every UK business a potential target. And the implications associated with ransomware attacks in the UK like these are terrifying.
Today’s security landscape reveals multiple converging threats that should concern every business leader. While ransomware groups wage war in cyberspace, UK prisons report 59% positive drug tests. Criminal gangs use drones to deliver contraband, demonstrating sophisticated criminal operations across both physical and digital domains. Meanwhile, the Southport inquiry examines security failures that allowed one of the UK’s most horrific crimes, highlighting how institutional vulnerabilities can have devastating consequences.
If you’re a business owner, security manager, or anyone responsible for protecting company assets, this isn’t someone else’s problem. It’s about to become yours.
The Criminal Empire Behind the Headlines
DragonForce, the largely Russian-speaking cyber gang behind the recent attacks on M&S, Harrods, and the Co-op, has just declared war on RansomHub, another major player in the ransomware ecosystem. This isn’t a simple business rivalry. It’s a battle for criminal supremacy that’s putting every UK company on the firing line.
The conflict escalated when DragonForce rebranded itself as a “cartel” in March, expanding its ransomware-as-a-service operations to attract more criminal affiliates. When they allegedly took down RansomHub’s website with a mocking “R.I.P 3/3/25” message, RansomHub retaliated by defacing DragonForce’s site and branding them “traitors.”
Why This Turf War Threatens Your Business
Here’s the nightmare scenario: cyber security experts are warning that this criminal conflict could lead to companies being extorted twice. You pay one ransomware group to restore your systems, only to be targeted by their rivals seeking dominance.
It’s already happened. UnitedHealth Group fell victim to exactly this scenario last year, paying $22 million to one group before facing additional extortion attempts from competitors. As Toby Lewis from Darktrace stated, there’s no honour among thieves in the hacking world.
The Scale of the Threat
The numbers are staggering. DragonForce listed 82 victims in just 12 months, while RansomHub reported approximately 500 victims in 2024. Global cyber crime costs are projected to reach $10 trillion in 2025, up from $3 trillion a decade ago.
For M&S alone, the attack is projected to cost £300 million in operating profit and has wiped over £1 billion from its market valuation. When a retail giant can be brought to its knees, smaller businesses face even greater vulnerability.

Understanding the Criminal Business Model
These aren’t lone hackers working from bedrooms. Ransomware-as-a-service operates like a criminal franchise, with groups like DragonForce providing tools and infrastructure to smaller criminal “affiliates” who execute the actual attacks.
The turf war has disrupted this ecosystem. According to cyber security firm Sophos, when DragonForce allegedly attacked rival groups, it created instability that increased risks for potential victims.
This volatility makes traditional cyber security strategies less effective. Companies can no longer predict attack patterns when criminal groups are actively trying to outdo each other’s destructive capabilities.
Protecting Your Business in the New Threat Landscape
The escalating ransomware attacks in the UK and the turf war demands a fundamental shift in how UK businesses approach cyber security. Traditional reactive measures aren’t sufficient when facing criminal organisations competing for maximum impact.
This threat convergence extends beyond cyber attacks. The criminal sophistication enabling drone deliveries to high-security prisons and he institutional failures exposed by major security incidents demonstrate that modern threats require multi-domain protection strategies. Businesses can no longer treat physical and digital security as separate concerns.
Understanding cyber security threats is the first step. Our comprehensive guide covers the evolving threat landscape that every security professional needs to understand.
For businesses serious about protection, investing in proper cyber security training isn’t optional – it’s essential. Our CPD-approved course provides practical knowledge on identifying threats and implementing effective defences.
The Human Element in Cyber Defence
Physical security professionals are increasingly finding themselves on the front lines of cyber defence. The convergence of physical and digital security means that security officers need cyber security skills to protect modern businesses effectively. Understanding this intersection is crucial. As we’ve explored in our analysis of how physical security enhances cyber security, the most effective protection strategies integrate both domains.
The Bottom Line for UK Businesses
The DragonForce-RansomHub conflict represents a dangerous new phase in cyber crime evolution. When criminal groups go to war, innocent businesses become collateral damage. The question isn’t whether your company will be targeted – it’s whether you’ll be prepared when it happens.

Take Action: Protect Your Business Today
Don’t wait for criminals to target your business. The ransomware attacks in the UK are escalating, and companies need comprehensive protection strategies that address both current threats and emerging risks.
Get Licensed leads the UK security industry in preparing professionals for modern threats. Our latest cyber security training course combines practical threat awareness with actionable defence strategies, delivered by industry experts who understand the evolving criminal landscape.
Whether you’re a security manager, business owner, or professional responsible for protecting company assets, our training provides the knowledge you need to defend against sophisticated criminal organisations.
Ready to strengthen your defences? Get in touch with our team and browse through our comprehensive security training solutions to find the perfect one for your team.
Leave a Reply