Login
iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
Following a 46-day outage, UK retailer Marks & Spencer (M&S) has resumed its online orders after its systems were disabled following a cyber attack.
For the first time since the cyber attack in April, M&S customers have access to delivery for most of its clothing range across England, Scotland and Wales.
The company said that many of its systems remain down and not all of its services have been restored, but it said the recovery will continue.
“It’s not the full range at the moment, we’ve focused on best sellers and newness,” a company spokesperson told Reuters.
“We’ll be bringing products online everyday so customers will see that grow over the coming days.”
The coming weeks will see services restored to Northern Ireland, as well as next-day delivery, international orders, nominated-day delivery and click and collect.
M&S was one of three UK retailers that suffered a cyber attack in April and early May, alongside Co-op and Harrods.
The retailer apparently suffered the cyber incident on 22 April, revealing the attack later that week.
The threat actors are believed to have been from the Scattered Spider hacking collective or the DragonForce ransomware operation, or some combination of the two.
M&S said the incident was not a direct cyber attack but a breach of a third party, believed to be Tata Consultancy Services, an Indian company used by M&S.
“Unable to get into our systems by breaking through our digital defences, the attackers did try another route, resorting to social engineering and entering through a third party rather than a system weakness,” Stuart Machin, M&S CEO, told media last month.
“Once access was gained, they used highly sophisticated techniques as part of the attack.”
The disruptions are costing M&S hundreds of millions in revenue, with reports that the company was facing a loss of £300 million (just over AU$625 million) as of last month. Previous reports suggested that the company is losing £43 million every week.
Be the first to hear the latest developments in the cyber industry.
