Marks & Spencer Faces Financial Fallout After Cyber Attack on Customer Data

Strategic Insights -

Marks & Spencer has revealed that hackers have accessed customer data, including names, email addresses, and dates of birth, in a sophisticated cyber attack. The group's chief executive, Stuart Machin, said that payment or card details, or account passwords, were not compromised. The incident has resulted in customers being unable to place orders online since April 25, with M&S emailing all website customers to alert them to the breach.

Key Takeaways:

  • The cyber attack has resulted in the compromise of personal customer data, including names, email addresses, and dates of birth.
  • The incident has caused significant disruption to M&S's online operations, with customers unable to place orders since April 25.
  • The company has emailed all website customers to alert them to the breach and is advising them to change their account password and enable two-factor authentication.
  • Experts warn of the potential wider fallout from the attack, including a loss of customer trust and a decrease in sales.
  • M&S has not disclosed the number of customers affected, but had 9.4 million active online customers in the year to March 30.
  • The attack has been linked to a hacking group operating under the name Scattered Spider.
  • The financial impact of the attack will be closely watched in M&S's upcoming annual results, due to be released on May 21.
  • Experts are urging all businesses to regularly review their cyber controls and respond effectively to incidents.
  • Identity security and third-party risk are key areas of focus for organisations to prevent similar incidents.

Statistics:

  • 9.4 million: The number of active online customers M&S had in the year to March 30.
  • 18%: The decline in M&S's share price since the crisis unfolded during the Easter weekend.
  • April 25: The date from which customers have been unable to place orders online.
  • Since the Easter weekend: The period during which the financial impact of the breach has been unfolding.
  • 21 May: The date on which M&S's annual results are due to be released.

Sources:

  • "Marks & Spencer reveals personal data taken by hackers", by Scott Reid, as reported in The Telegraph.
  • "M&S data breach: Experts warn of wider fallout", as reported in BBC News.
  • "M&S cyber attack: Hackers accessed customer data, says CEO", as reported in The Guardian.
  • "Retail Briefing: M&S data breach – FAQ", as reported in The Grocer.
  • "Marks & Spencer data breach: Scattered Spider hackers target online shoppers", as reported in Yahoo News.