Marks and Spencer Grapples with Cyber Attack Fallout

Strategic Insights -

Marks and Spencer's website remains inaccessible for customers after a recent cyber attack, leaving the company to deal with the consequences. The incident follows a recent breach over the Easter weekend, where customer data was compromised, and online orders were ceased, resulting in bare shelves. Marks and Spencer has acknowledged that "human error" was behind the costly attack, which is estimated to set the company back by approximately £300 million.

Key Takeaways:

  • The cyber attack has left Marks and Spencer's website temporarily inaccessible, with customers met with an apology message.
  • The attack is believed to be a ransomware attack, with customer data potentially including names, email addresses, postal addresses, and birth dates compromised.
  • The company has acknowledged that "human error" was behind the attack, which is estimated to cost around £300 million.
  • The disruption is expected to persist until July, with the company's digital expert, Robert Cottrill, emphasizing the importance of a comprehensive restoration of systems to guarantee security and prevent similar future mishaps.
  • Cottrill also stressed the need for a secure and complete recovery, prioritizing robust security at every layer before resumption, rather than a rapid return to normal operations.
  • The incident serves as a powerful reminder to all organizations that cybersecurity must be treated as a board-level issue, with effective incident response plans, regular testing, and collaboration with cybersecurity experts critical to minimizing disruption.
  • Marks and Spencer's financial report showed an unexpected rise in adjusted pre-tax profits, totaling £875.5 million for the financial year ending March, a 22.2% increase from last year.

Statistics:

  • £300 million: estimated cost of the cyber attack to Marks and Spencer.
  • £875.5 million: adjusted pre-tax profits for the financial year ending March, a 22.2% increase from last year.
  • 22.2%: increase in adjusted pre-tax profits compared to the previous year.
  • Easter weekend: time period when the previous cyber attack occurred, resulting in online orders being ceased and customer data being compromised.
  • July: expected date when the disruption is expected to be resolved.
  • £300 million: estimated cost of the cyber attack to Marks and Spencer.

Sources:

  • BBC: "Marks and Spencer's website is 'currently unavailable' after a cyber attack"
  • Wales Online: "M&S CEO Stuart Machin says April crisis 'human error'"
  • ANS: "Digital expert Robert Cottrill discusses the importance of cybersecurity"
  • PA news agency: "M&S appears to be taking the necessary steps following the cyber attack, with a focus on restoring core systems and recovering critical data."