Marks & Spencer Faces Financial Fallout from Cyber Attack

Strategic Insights -

Marks & Spencer is facing a significant financial challenge after it revealed that hackers had accessed personal customer data, including names, email addresses, and dates of birth. The cyber attack, which was first reported over the Easter weekend, has resulted in orders being unable to be taken on the company's website or app since April 25. The incident has also impacted product availability in stores, and the company has emailed all website customers to alert them to the data breach.

Key Takeaways:

  • The cyber attack has resulted in 9.4 million active online customers being notified about the data breach, according to Marks & Spencer's last full-year results.
  • The company's chief executive, Stuart Machin, has assured customers that there is no evidence the data has been shared and that it does not include usable card or payment details, or account passwords.
  • Marks & Spencer is advising customers to change their account password and enable two-factor authentication as an added layer of security.
  • The company's share price has fallen by almost 18% since the crisis unfolded, and analysts warn of a potential wider fallout from the attack.
  • The National Crime Agency is investigating the attacks individually but is "mindful they may be linked."
  • Experts are advocating for organizations to regularly review cyber controls, focus on identity security, and third-party risk management.
  • The incident highlights the importance of robust plans to respond effectively to cyber incidents and employee education on spotting attempts to access systems via sophisticated phishing emails.

Statistics:

  • 9.4 million active online customers were notified about the data breach, according to Marks & Spencer's last full-year results.
  • The company's share price has fallen by almost 18% since the crisis unfolded.
  • The cyber attack has resulted in orders being unable to be taken on the company's website or app since April 25.
  • Marks & Spencer's annual results, due on May 21, will be closely watched for an update on the financial impact of the attack.

Sources:

  • [1] The Daily Telegraph, "Marks and Spencer Scattered Spider online cyber attack explained - the ongoing impact on UK shopping"
  • [2] Reuters, "Marks & Spencer says hackers accessed some customer data"
  • [3] Information Commissioner's Office, "ICO looking into Marks and Spencer cyber attack"
  • [4] Hargreaves Lansdown, "Cyber attack highlights widespread industry vulnerabilities"
  • [5] BBC, "Marks and Spencer cyber attack: A closer look at the breach"
  • [6] The Guardian, "Marks & Spencer data breach: customers urged to change passwords"