Cyber attack25 Apr 2025 20:48
I've not had time to post my full thoughts on what's happening...I have some experience of the industry.
My gut feel is that there has been a significant ransomware attack. They have essentially taken control and encrypted key systems. M&S are now facing paying ransom (which won't happen especially with NCSC involved) or a full recovery of systems. Given the delay and announcement today I suspect the restore of the various systems has not gone well...your only true test of resilience is in a disaster because nobody pays for this until it's too late.
I feel sorry for the IT admins... Must be working crazy hours and under immense pressure.
Where do we go from here? Impossible to guess, but have read rumours of branch pcs being completely cut off from HQ, stock systems down so they are sending stock blind to stores.
Alongside this they will be investigating the breach, they don't seem to know the full extent, as it stands it seems they have no evidence of customer data being leaked but I think it's too early to rule out and imo likely to have been taken.
This is not scaremongering, I've been open that I sold... I did so because I had a good price to get out at, the same cannot be said about my Ocado holding which I still hold and I am concerned the stock issues will cause issues with Ocado too.
Let's hope they get things restored over the weekend but the way this is playing out so far makes me believe this is far from over.