Marks & Spencer cyberattack disrupts online services and exposes customer data

Marks & Spencer (M&S), one of the UK’s most iconic retailers, has confirmed a significant cyberattack that has disrupted its online operations and compromised customer data. The incident, which occurred in late April, has left the company struggling to restore services, with online orders suspended and digital systems offline across multiple platforms. 

According to BBC News, M&S revealed that personal customer information, including names, addresses, dates of birth, telephone numbers, and online order histories, was stolen during the attack. Crucially, the retailer confirmed that no usable payment details or account passwords were accessed, and there is currently no evidence that the stolen data has been shared publicly. 

 The breach has had a substantial financial impact. Analysts estimate that M&S is losing approximately £43 million per week in sales due to the disruption, with total losses projected to reach £300 million for the year. The company has begun contacting affected customers and prompting password resets as a precautionary measure. 

 M&S Chief Executive Stuart Machin stated that the company is “working around the clock” to restore normal operations and is collaborating with cybersecurity experts and relevant authorities. The attack has also prompted a broader industry conversation about digital resilience, with government agencies urging businesses to prepare contingency plans and consider offline backups for critical systems. 

This incident follows a series of cyber-attacks targeting UK retailers, including The Co-op and Harrods, and highlights the increasing sophistication of threat actors. While M&S has not disclosed the identity of the attackers, it is believed that ransomware groups may be involved, and the risk of data extortion remains. 

 Need help improving your cybersecurity posture? 

At Extech Cloud, we continue to monitor developments and support our clients in strengthening their cyber resilience. The M&S case serves as a stark reminder that cyber threats are not only a risk to data but can have profound operational and economic consequences, for all types of businesses. 

 For businesses looking to assess their exposure and improve their defences, our cybersecurity specialists are available to provide guidance and tailored solutions.  

Source: https://www.bbc.com/news