M&S Faces Major Cyber Attack with No Preparedness Plan, Insider Reveals

Marks & Spencer (M&S) is grappling with the aftermath of a severe cyber attack that has disrupted operations for over a week. An anonymous insider revealed to Sky News that the company lacked any business continuity or cyberattack response plan. As a result, chaos has ensued at the head office, with staff working around the clock, even sleeping in the office, and relying on personal devices due to restrictions on work systems. Communication has become disorganized, shifting from internal channels like Microsoft Teams to WhatsApp amid rising internal paranoia. Employees are uncertain whether hackers still have access to internal systems. The retailer has had to suspend online orders and halt recruitment during the crisis. M&S CEO Stuart Machin issued a public apology, assuring customers that teams are working intensively to restore services. The incident is part of a wider trend of cyberattacks on UK retailers, including Harrods and the Co-op Group. In response, Cabinet Office minister Pat McFadden will emphasize at the CyberUK conference that UK businesses must prioritize cybersecurity and treat digital infrastructure with the same vigilance as physical security. The attack highlights critical vulnerabilities in corporate cybersecurity preparedness.