Archive — US — techcrunch
Marks & Spencer confirms cybersecurity incident amid ongoing disruption
Marks & Spencer has confirmed a cybersecurity incident causing disruptions with in-store payment terminals and click-and-collect services. The retailer is engaging cybersecurity experts and has notified authorities, but the nature of the attack and its impact on customer data remain unclear. Despite the issues, stores are open and online services are functioning normally.
Key points
- Marks & Spencer confirmed a cybersecurity incident affecting its operations.
- Customers reported disruptions including non-functional payment terminals and issues with click-and-collect services.
- The company is working with cybersecurity experts for investigation and notified data protection authorities.
- Operational changes were implemented to protect the business, including limiting certain services.
- Currently, stores remain open and the website/app are operational despite some outages.
Why it matters
- Cybersecurity incidents in retail have been rising, highlighting the vulnerability of payment systems.
- Numerous retailers have faced similar disruptions, emphasizing the importance of cybersecurity measures.
- As of 2025, IT trends show an increased focus on digital resilience and cybersecurity in retail.
The Marks & Spencer incident underscores the ongoing cybersecurity challenges that retailers face, necessitating robust defenses and quick responses to safeguard operations and customer data.