"Given that one threat actor claimed responsibility for both M&S and Co-op, the close timing, and the similar tactics, ...