Marks & Spencer (M&S) narrowly avoided catastrophic damage from a recent cyberattack that its chairman, Archie Norman, described as “traumatic.” The retail giant is now bracing for a staggering \u00a3300 million hit to its annual profits following the breach, which exposed sensitive customer data, including names and addresses.<\/p>\n
Norman revealed to MPs that the timing of the attack\u2014over the Easter holiday\u2014was both fortunate and alarming. Had it occurred in 2017, when he first joined as chairman, the consequences could have been far worse. At the time, M&S was struggling with outdated systems and declining performance.<\/p>\n
“If this had happened then, I think we would have been kippered,”<\/em>\u00a0Norman told the Business and Trade Select Committee. The hackers, believed to be linked to the notorious\u00a0Scattered Spider<\/strong>\u00a0and\u00a0Dragon Force<\/strong>\u00a0cybercrime groups, aimed to disrupt M&S\u2019s operations, potentially for ransom or extortion.<\/p>\n The breach forced M&S to temporarily suspend online orders on\u00a0April 25<\/strong>, causing significant disruptions. While customer-facing operations are expected to normalize by the end of the month, internal recovery could take months.<\/p>\n Norman described the incident as an\u00a0“out-of-body experience”<\/em>\u00a0and emphasized the psychological toll on the company. The attack came just as M&S was enjoying a successful turnaround, shedding its outdated image and posting stronger profits.<\/p>\n The attackers, whom Norman suggested may be\u00a0“former computer gamers,”<\/em>\u00a0reportedly bragged to media outlets about their exploit.\u00a0“It\u2019s an unusual experience to be brushing your teeth in the morning when someone on the BBC shares a message from the people attacking your business,”<\/em>\u00a0he remarked.<\/p>\n The\u00a0National Crime Agency (NCA)<\/strong>\u00a0is investigating the breach, but Norman stressed the need for better reporting of cyber incidents. He argued that large companies should be required to disclose attacks to the\u00a0National Cyber Security Centre (NCSC)<\/strong>\u00a0to improve collective defenses.<\/p>\n M&S is not alone\u2014Harrods<\/strong>\u00a0and the\u00a0Co-op<\/strong>\u00a0also reported cyberattacks around the same time. Norman warned that many major breaches go unreported, leaving other businesses vulnerable.\u00a0“There\u2019s a big deficit in knowledge that could help companies protect themselves,”<\/em>\u00a0he said.<\/p>\n For more insights on cybersecurity threats and how businesses can defend themselves, visit\u00a0TechRadar\u2019s guide on ransomware protection<\/a><\/strong>\u00a0or\u00a0BBC\u2019s coverage on recent cyberattacks<\/a><\/strong>.<\/p>\n Investors reacted cautiously, with M&S shares dropping\u00a01% (3.3p)<\/strong>\u00a0to\u00a0335.9p<\/strong>\u00a0following the news. As cyber threats grow, businesses must prioritize digital security\u2014or risk becoming the next victim.<\/p>\nThe Aftermath of the Attack<\/strong><\/h3>\n
Cybercriminals Boasted About the Hack<\/strong><\/h3>\n
A Growing Threat to UK Businesses<\/strong><\/h3>\n
Market Reaction<\/strong><\/h3>\n