---
title: "Phishing, Ransomware, Data Leaks: Lessons from Recent UK Cyber Attacks Copy for Testing"
description: Explore what the recent cyberattacks on M&S, Co-op and West Lothian schools have in common and how your organisation can avoid the same mistakes.
image: https://blog.grantmcgregor.co.uk/hs-fs/hubfs/Blog-images/Cyber-Advisor7.png?width=374&height=251&name=Cyber-Advisor7.png
---

<https://grantmcgregor.co.uk/>

<https://grantmcgregor.co.uk/>[![Grant McGregor](https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg "Grant McGregor")](https://www.grantmcgregor.co.uk/)

- [Home](https://grantmcgregor.co.uk/)
- About Us

    - [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
    - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
    - [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
    - [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services

    - [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
    - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
    - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services

    - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
    - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
    - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
    - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
    - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
    - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
    - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
    - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
    - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
    - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub

    - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
    - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
    - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
    - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)

- [Home](https://grantmcgregor.co.uk/)
- About Us

    - [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
    - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
    - [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
    - [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services

    - [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
    - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
    - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services

    - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
    - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
    - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
    - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
    - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
    - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
    - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
    - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
    - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
    - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub

    - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
    - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
    - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
    - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)

[Contact Us](https://grantmcgregor.co.uk/contact-us)

[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)

# Phishing, Ransomware, Data Leaks: Lessons from Recent UK Cyber Attacks Copy for Testing

John Doe

 17 June 2025 • 2 min read

<https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing> <https://x.com/intent/tweet?url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing&text=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPhishing%2C+Ransomware%2C+Data+Leaks%3A+Lessons+from+Recent+UK+Cyber+Attacks+Copy+for+Testing%3C%2Fspan%3E&via=yourusername> <https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing&title=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPhishing%2C+Ransomware%2C+Data+Leaks%3A+Lessons+from+Recent+UK+Cyber+Attacks+Copy+for+Testing%3C%2Fspan%3E>

![](https://blog.grantmcgregor.co.uk/hs-fs/hubfs/Blog-images/Cyber-Advisor7.png?width=374&height=251&name=Cyber-Advisor7.png)

Explore what the recent cyberattacks on M&S, Co-op and West Lothian schools have in common and how your organisation can avoid the same mistakes.

Following data breaches at Marks & Spencer and the Co-op, the education sector has become the latest target.

### In April, two major UK retailers made headlines for all the wrong reasons.

![Cyber-attack-m&s](https://blog.grantmcgregor.co.uk/hubfs/Cyber-attack-m%26s.webp)

Marks & Spencer was affected by a data breach when attackers impersonated IT help desk staff and tricked employees into handing over their login credentials and multi-factor authentication (MFA) codes.

This gave the criminals direct access to internal systems and sensitive data.

Meanwhile, the Co-op narrowly avoided a full-scale crisis. Hackers infiltrated its network and attempted to deploy ransomware. But the Co-op's IT team acted quickly, disconnecting internal systems and preventing full encryption. Although this caused a short-term disruption, it ultimately minimised damage and sped up recovery.

Then, in May, the threat came closer to home when it impacted the education sector.

### What Was Affected?

### ![Cyber-attack](https://blog.grantmcgregor.co.uk/hs-fs/hubfs/Blog-images/Cyber-attack.png?width=467&height=272&name=Cyber-attack.png)

The ransomware attack primarily targeted internal school documents, including lesson plans and operational data. However, West Lothian Council has since confirmed that some personal and sensitive data was stolen, too.

While confidential pupil records, financial data and social care systems are stored separately, officials have not ruled out the possibility that medical or social work information may have been compromised.

The council has contacted parents, carers and staff at over 140 sites to inform them of the breach and offer support.

According to BBC reports, a group known as Interlock has claimed responsibility for the attack and is threatening to publish the stolen data unless a ransom is paid.

![Cyber-attack2](https://blog.grantmcgregor.co.uk/hubfs/Cyber-attack2.webp)

### What Ties These Attacks Together?

Different targets. Different tactics. But they all have the same underlying issues.

- Phishing and social engineering
- Compromised credentials
- Delayed patching
- Weak network segmentation
- Lack of early detection

 

 

John Doe

 17 June 2025 • 2 min read

<https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing> <https://x.com/intent/tweet?url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing&text=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPhishing%2C+Ransomware%2C+Data+Leaks%3A+Lessons+from+Recent+UK+Cyber+Attacks+Copy+for+Testing%3C%2Fspan%3E&via=yourusername> <https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.grantmcgregor.co.uk%2Ftesting-blogs%2Fphishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing&title=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPhishing%2C+Ransomware%2C+Data+Leaks%3A+Lessons+from+Recent+UK+Cyber+Attacks+Copy+for+Testing%3C%2Fspan%3E>

## Recent Posts

![](https://blog.grantmcgregor.co.uk/hubfs/Shadow%20AI%20-%20Is%20Your%20Business%20Ready%20for%20AI%20Adoption.png)

### Shadow AI: Is Your Business Ready for AI Adoption?

 Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...

[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)

![Our Net Zero Target for 2040 - What Can We Change](https://blog.grantmcgregor.co.uk/hubfs/Our%20Net%20Zero%20Target%20for%202040%20-%20What%20Can%20We%20Change.png)

### Our Net Zero Target for 2040: What Can We Change?

 From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...

[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)

![](https://blog.grantmcgregor.co.uk/hubfs/What%20Is%20Penetration%20Testing%3F%20A%20Guide%20for%20Businesses.png)

### What Is Penetration Testing? A Guide for Businesses

 Learn what penetration testing is, how it works, what the report should include and when your business should consider a...

[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)

![Grant McGregor named 2026 Top Managed Service Provider](https://blog.grantmcgregor.co.uk/hubfs/Social/MSP%20501%202026%20Winner.png)

### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501

 Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a...

[Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501)

Union

## Empower your business with secure, expert-led solutions.

Talk to us about people-focused technology that drives results.

[Start a conversation](https://grantmcgregor.co.uk/contact-us)

![Woman in White longsleeve polo](https://blog.grantmcgregor.co.uk/hubfs/Woman%20in%20White%20longsleeve%20polo.png)

![Divider Footer](https://blog.grantmcgregor.co.uk/hubfs/footer.svg)

![GrantMcGeregor Logo White](https://blog.grantmcgregor.co.uk/hubfs/McGregor%20Theme%20Assets/GRMC_white_logo-cropped.svg "GrantMcGeregor Logo White")

Premium IT Services Tailored for Leading Brands

[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)

Quick Links

- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)

Services

- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)

Edinburgh – Chesterfield

![Phone icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/tel.png "Phone icon")

[0131 603 7910](tel:+441316037910)

![Email icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/mail.png "Email icon")

[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)

![Location icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/loc.png "Location icon")

**Main Office:**   
The Merchants' Hall,  
22 Hanover St,  
Edinburgh EH2 2EP

 © 2026

Grant McGregor. All rights reserved.

[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "John Doe",
    "url" : "https://blog.grantmcgregor.co.uk/testing-blogs/author/john-doe"
  },
  "dateModified" : "2025-07-02T05:37:59.540Z",
  "datePublished" : "2025-06-17T04:05:20.000Z",
  "headline" : "Phishing, Ransomware, Data Leaks: Lessons from Recent UK Cyber Attacks Copy for Testing",
  "image" : [ "https://blog.grantmcgregor.co.uk/hs-fs/hubfs/Blog-images/Cyber-Advisor7.png?width=374&height=251&name=Cyber-Advisor7.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://blog.grantmcgregor.co.uk/testing-blogs/phishing-ransomware-data-leaks-lessons-from-recent-uk-cyber-attacks-copy-for-testing",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
    },
    "name" : "Grant McGregor"
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://grantmcgregor.co.uk/",
  "@type" : "LocalBusiness",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "GB",
    "addressLocality" : "Edinburgh",
    "postalCode" : "EH2 2EP",
    "streetAddress" : "22 Hanover Street"
  },
  "geo" : {
    "@type" : "GeoCoordinates",
    "latitude" : 55.9526313,
    "longitude" : -3.1970679
  },
  "image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
  "name" : "Grant McGregor",
  "openingHoursSpecification" : {
    "@type" : "OpeningHoursSpecification",
    "closes" : "18:00",
    "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
    "opens" : "08:00"
  },
  "sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
  "telephone" : "+441316037910",
  "url" : "https://grantmcgregor.co.uk/"
}
```