Sign in Subscribe
Computer hackers

Marks & Spencer's Cyberattack: A Wake-Up Call for Retailers

Strategic Insights

— 1 min read

Marks & Spencer, one of the UK's largest retailers, has faced a significant cyberattack that exposed customer data and cost the company £300 million. The attack, which occurred over the Easter weekend, brought the website offline for several weeks, with the company's market capitalization dropping by around £1 billion. Despite the severity of the incident, Marks & Spencer's underlying profits have risen by 22% to £876 million pre-tax, with the company boasting £438 million in net funds, excluding lease liabilities.

Key Takeaways:

  • The cyberattackers used "social engineering" techniques via a third party, such as a supplier or contractor, to gain access to the company's systems.
  • The attack cost the company £300 million, although up to £100 million will be covered by insurance.
  • Marks & Spencer's underlying profits have risen by 22% to £876 million pre-tax, with the company boasting £438 million in net funds, excluding lease liabilities.
  • The company's CEO, Stuart Machin, has taken a £1 million pay cut as a result of the incident, and has pledged to accelerate the company's spending on technology.
  • The company's market capitalization fell by around £1 billion as a result of the attack, but has since recovered slightly.
  • Deutsche Bank analysts have praised the company's "clear underlying strength", with the company taking market share in both the food and fashion sectors.
  • The company has increased its dividend by 20% to 3.6p, despite the severity of the attack.

Statistics:

  • £300 million: the cost of the cyberattack to Marks & Spencer.
  • £100 million: the amount that will be covered by insurance.
  • £876 million: the company's underlying profits, up 22% from the previous year.
  • £438 million: the net funds, excluding lease liabilities, available to the company.
  • £650 million: the company's increased capex for this year, with a focus on technology spending.
  • £1 billion: the drop in the company's market capitalization as a result of the attack.
  • 15%: the drop in the company's share price before the 2% bounce to 3743/4p.
  • 20%: the increase in the company's dividend.

Sources:

  • "Marks & Spencer fesses up to £300m hit in cyberattack" by The Times.
  • "M&S profits up 22% despite £300m cyberattack" by The Guardian.
  • "M&S accelerates technology spend after £300m cyber hit" by Bloomberg.

Read more