Tata Consultancy Services Investigates Possible Role in M&S Cyber Attack

Tata Consultancy Services (TCS), a major Indian IT firm, is conducting an internal investigation to determine whether it was the third-party gateway exploited in a recent cyber-attack on the British retailer Marks & Spencer (M&S). The attack, which caused major disruptions to M&S’s online operations since late April, is believed to have been executed by a cybercriminal group known as Scattered Spider. Although M&S and TCS have declined to comment publicly, sources familiar with the investigation expect the probe to conclude by the end of the month. TCS has worked with M&S for over a decade, notably collaborating on the Sparks customer loyalty program and previously winning a joint industry award. The cyberattack is projected to reduce M&S’s annual profits by approximately £300 million, with services not expected to fully stabilize until July. Authorities are investigating links between the same hacking group and earlier attacks on the Co-op and Harrods, although only M&S has suffered significant impact. TCS’s other clients include major brands such as easyJet, Nationwide, and Jaguar Land Rover, raising broader concerns about potential vulnerabilities. M&S’s CEO, Stuart Machin, acknowledged the severity of the cyber-attack but did not address whether a ransom had been paid.