As Marks and Spencer (M&S) grapples with the aftermath of a cyberattack that has thrown its checkout systems into turmoil, the British retail behemoth is faced with the daunting task of navigating both technological and reputational challenges.
The incident has rendered contactless payment options and the Click and Collect service non-functional, leaving customers and the company in a lurch.
While the full extent of the damage is yet to be disclosed, M&S’s swift decision to take certain systems offline suggests the severity of the attack.
The retail industry is no stranger to cyber threats, and M&S is the latest in a string of high-profile victims.
With its sprawling network of physical stores, an online platform, and a widely-used app, M&S is a prime target for cybercriminals who see the disruption of services as a leverage point.
The company’s decision to move processes offline is reminiscent of responses to ransomware attacks, though it remains unclear if ransomware is indeed the culprit here.
Cyberattacks like this one highlight a glaring vulnerability in the retail sector.
With profit margins already razor-thin, retailers often find themselves underprepared for such digital assaults.
Pierre Noel, Field Chief Information Security Officer (CISO) for EMEA at Expel, sheds light on the precarious position of retailers: “The retail industry is operating on a very small profit margin, and therefore the amount of attention or budget they can give to addressing their cybersecurity posture is usually scarce.”
Noel’s insights underscore a critical need for retailers to adopt proactive cybersecurity measures.
Implementing a continuous cyber risk quantification program could be a game-changer.
Such a program would not only help in identifying potential threats but also assist in crafting effective mitigation strategies.
This proactive stance allows senior executives and board members to make informed decisions about acceptable risks, ensuring that cybersecurity becomes a boardroom priority rather than an afterthought.
The economic implications of cyberattacks on retailers are profound.
As seen in similar incidents, even a brief disruption can lead to significant financial losses.
In 2025, for instance, Walmart’s Sam’s Club was targeted by a ransomware attack, causing widespread operational chaos.
For M&S, the ongoing issues with contactless payments and Click and Collect are not just inconveniences—they represent potential revenue losses and customer dissatisfaction.
Customers, too, are left in a state of uncertainty.
In an era where convenience is king, the inability to use contactless payments or quickly pick up online orders can be frustrating.
As the situation drags on, M&S must work diligently to maintain customer trust and loyalty—a task made all the more difficult by the opacity surrounding the potential exposure of customer data.
This incident serves as a cautionary tale for the entire retail sector.
It’s a stark reminder that in our increasingly digital world, robust cybersecurity measures are not optional—they are essential.
Retailers must not only invest in technological defenses but also foster a culture of cybersecurity awareness among employees and stakeholders.
For M&S, the road to recovery involves not just resolving the immediate technical issues but also rebuilding its reputation.
Clear communication with customers, transparency about the nature of the attack, and the steps being taken to prevent future incidents will be key.
The company’s ability to navigate this crisis will set a precedent for how retail giants handle similar challenges in the future.
As we watch this story unfold, it’s clear that the stakes are high.
Cybersecurity is no longer a niche concern—it’s a fundamental aspect of business operations that can have lasting impacts on a company’s bottom line and brand image.
For M&S and others in the industry, the lessons learned from this ordeal will hopefully lead to a more secure and resilient retail landscape.
A new strategic partnership aims to overhaul space-based encryption hardware to support the high-speed data demands of modern military satellite networks.
Commercial data networks have become a critical vulnerability for military personnel as foreign adversaries exploit real-time bidding for intelligence.
Mohit Bansal’s approach to security engineering at Webflow rests on a deceptively simple reframe: treating fixed headcount not as a limitation to work around but as a firm design constraint that shapes every architectural decision, from how vulnerabilities get prioritized to how vendor risk gets automated away. His core discipline is pragmatic sequencing over theoretical perfection—getting 80 percent coverage on five critical risks rather than chasing 100 percent on two—paired with a relentless drive to automate repetitive data-gathering so a fixed team can spend its limited human judgment on the problems that actually require it.
