Archive — US — techcrunch
Marks & Spencer chair refuses to say if retailer paid hackers after ransomwareattack
Marks & Spencer's chairman, Archie Norman, refrained from confirming whether the company paid a ransom after a ransomware attack by DragonForce. The attack, disclosed in May, compromised customer data and disrupted operations for weeks. Norman stated the firm is still recovering and believes discussing payments is not in the public interest due to legal concerns.
Key points
- The chairman refused to disclose if Marks & Spencer paid ransom to hackers, citing legal reasons.
- The ransomware attack involved the hacking group DragonForce.
- Customer data was compromised, including personal information and order histories.
- The attack interrupted operations, leading to empty shelves and online ordering issues.
- Recovery efforts are ongoing and expected to last until October or November.
Why it matters
- Ransomware attacks have become increasingly common in the retail sector, reflecting broader cybersecurity challenges.
- The incident underscores the importance of data protection and recovery plans, relevant to trends in IT security by 2025.
- Increasing scrutiny on corporate transparency regarding cyber incidents is shaping public discourse and legislation.
The situation highlights the critical need for robust cybersecurity measures and transparent communication, especially in the aftermath of data breaches.