Cyber Incident Victim: Marks & Spencer
Date:
Oct 2025
Location:
United Kingdom
Summary
Marks & Spencer suspended its online ordering system for six weeks after a cyber attack disrupted its digital operations. The interruption was described as one of two significant cyber incidents affecting major British companies, the other being a production halt at Jaguar Land Rover that lasted five weeks. No further details about the attackers or the specific methods used were disclosed in the reporting.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The M&S cyber incident occurred in 2025 as one of two major cyber attacks on big British companies that year, the other being Jaguar Land Rover. The attack forced Marks & Spencer to suspend its online orders for six weeks. This suspension disrupted the retailer's online sales channel during that period. The incident was described as a major cyber attack, indicating a significant breach of the company's systems. No further technical details about the attack vector or threat actor are provided in the source.
The company's response consisted of halting online orders while it addressed the underlying issue, though specific containment or remediation steps are not detailed in the source. The suspension lasted six weeks. The incident contributed to a broader pattern of cyber threats facing UK organizations, alongside the October hack of the UK government and the production shutdown at Jaguar Land Rover. The source does not provide information on any data loss, financial impact, or customer effects beyond the order suspension. No further details about the incident's timeline, resolution, or aftermath are available in the provided material.