Tue, 22 Apr 2025

Tue, 22 Apr 2025 Cyber attack on M&S leads to click and collect delays

Angry customers have also complained of being unable to use vouchers and gift cards.
Marks & Spencer (M&S) has been experiencing a "cyber incident" that affected some of its services over the past few days. The retailer's Click and Collect service was impacted, as well as its ability to collect contactless payments. M&S chief executive Stuart Machin apologized to customers for the inconvenience caused by technical issues. The company temporarily made changes to store operations to protect customers and the business from potential cyber threats. External cybersecurity experts were engaged to investigate and manage the incident. The Information Commissioner's Office (ICO) was notified, and an ICO spokesperson confirmed that they are assessing the information provided by M&S. M&S reported that it is still experiencing technical difficulties with Click and Collect orders and gift card processing. Customers have been complaining on social media about delays and issues with using gift cards in stores. The company assured customers that there is no need to take any action, but advised them to keep an eye out for updates on the situation. IT experts said that the incident was a reminder of the importance of cybersecurity measures for even well-resourced organizations. They emphasized the need for practical and proportionate steps to address common vulnerabilities, such as securing devices and email accounts. This is not an isolated incident, as several major high street names have experienced IT problems in recent months, including Morrisons, Barclays, and Lloyds Bank. The issues caused by these incidents highlight the ongoing threat of cyber attacks and the need for businesses to prioritize cybersecurity measures.
  >>