Sign in Subscribe
Cyberterrorism

Marks & Spencer Ends TCS IT Service Desk Contract Amid Cyberattack Controversy

Strategic Insights

— 1 min read

Marks & Spencer has terminated its contract with Tata Consultancy Services (TCS) to run the company's IT service desk, a decision made months after a cyberattack on the UK retailer. Despite the potential connection, both parties claim the move is unrelated to the April 2025 cyberattack. TCS continues to provide other technology and IT services to M&S, and the retailer values their partnership with the TCS team.

Key Takeaways:

  • Marks & Spencer (M&S) has ended its contract with Tata Consultancy Services (TCS) to run the company's IT service desk, a decision made in July.
  • TCS has been providing services to M&S for over a decade and the termination of the IT service desk contract represents only a small part of its overall engagement with the retailer.
  • M&S began the process to renew TCS's contract in January 2025, months before the cyberattack.
  • The retailer decided to proceed with another service provider after completing the process.
  • TCS stated that the termination of the IT service desk contract and the cyberattack were "clearly unrelated."
  • TCS confirmed that its network had no signs of compromise for M&S or other clients.
  • M&S was hit by a cyberattack in April 2025, forcing the retailer to pause online orders and leaving it with empty shelves in several stores.
  • The attack is expected to reduce M&S' operating profits by up to £300 million this year.
  • TCS conducted an internal investigation in June 2025 and was cleared of being the source of the breach.
  • Hackers used "sophisticated impersonation" to gain access, "involving a third party," according to M&S Chair Archie Norman.

Statistics:

  • £300 million: The expected reduction in M&S' operating profits due to the cyberattack.
  • April 2025: The month when M&S was hit by a cyberattack.
  • June 2025: The month when TCS conducted an internal investigation.
  • 211: The number of UK-based clients that TCS provides services to.
  • £300 million: The expected reduction in operating profits due to the cyberattack.

Sources:

  • Financial Times
  • The Telegraph
  • IE Online Media Services Pvt. Ltd.
  • Contify.com
  • House of Commons Business and Trade Select Committee

Read more