Cyber attack on M&S involved ‘sophisticated impersonation’, chairman says
The chairman of Marks & Spencer has told MPs the company is “still in the rebuild mode” and will be for “some time to come” following a cyber attack which led to empty shelves and limited online operations for months.
Speaking publicly for the first time since the attack, Archie Norman declined to answer whether the business had paid a ransom.
“It’s a business decision, it’s a principal decision,” he told members of the Business and Trade Committee (BTC).
“The question you have to ask is – and I think all businesses should ask – is, when they look at the demand, what are they getting for it?
“Because once your systems are compromised and you’re going to have to rebuild anyway, maybe they’ve got exfiltrated data that you don’t want to publish. Maybe there’s something there, but in our case, substantially the damage had been done.”
Money blog: 10 happiest and unhappiest professions for shift workers
When asked again later in the BTC evidence session, Mr Norman said, “We’re not discussing any of the details of our interaction with the threat actor, including this subject, but that subject is fully shared with the NCA [National Crime Agency].”
“We don’t think it’s in the public interest to go into that subject on it, because it is a matter of law enforcement”, he added.
What happened?
The initial entry into M&S’s systems took place on 17 April through “sophisticated impersonation” that involved a third party, Mr Norman said.
It was two days later, on Easter Saturday, before the company became aware of the attack, and approximately a week after the intrusion, before the retailer heard directly from the attacker.
Please use Chrome browser for a more accessible video player
Who is behind M&S cyberattack?
A day later, after learning of the attack, the authorities were notified, while customers were told on Tuesday, MPs heard.
As well as British authorities, the US FBI was contacted, who are “more muscled up in this zone” and were “very supportive”, Mr Norman said.
By the time the breach is clear, systems have already been compromised, the chairman said.
The group behind the attack may have been Scattered Spider, some of whom are believed to be English-speaking teenagers, but Mr Norman said M&S made an early decision that no one from the company would deal directly with the so-called “threat actor”.
“Anybody who’s suffered an event like ours, it would be foolish to say there’s not a thousand things you’d like to have done differently,” he added.
Advice for businesses
In a warning to other businesses, M&S’s general counsel and company secretary Nick Folland said firms should be prepared to operate without IT systems.
“One of the things that we would say to others is make sure you can run your business on pen and paper,” he said.
Awareness and planning for the threats of cybersecurity meant M&S had trebled the number of people working on cybersecurity to 80and doubled its expenditure.
“We curiously doubled our insurance cover last year”, Mr Norman added.
In a good position
The business was better positioned to deal with the strike than at the start of Mr Norman’s tenure, he said.
“The context of M&S is when I joined the business, it was a very broken business… our systems were in a pretty decrepit state.”
“So I have to say if this has happened then I think we would have been kippered.”
Read more:
UK to miss deadline to agree steel and aluminium tariffs
Flavour of what’s to come as first Post Office inquiry lays bare heart-breaking legacy
Recent profits meant the company was “muscled up”.
“Extensive” insurance cover means M&S expects to make an “unsurprisingly significant claim” and receive “substantial recovery”, though the process of finding out how much will take about 18 months.
The £300m sum M&S said it expected to lose as a result of the cyber attack does not include money it expects to claim via insurance. The financial hit was calculated at £300m as the chain department store was losing £10m a week by not operating online.
The incident has “not really” affected its future, Mr Norman said.
The UK economy unexpectedly shrank in May, even after the worst of Donald Trump’s tariffs were paused, official figures showed.
A standard measure of economic growth, gross domestic product (GDP), contracted 0.1% in May, according to the Office for National Statistics (ONS).
Rather than a fall being anticipated, growth of 0.1% was forecast by economists polled by Reuters as big falls in production and construction were seen.
It followed a 0.3% contraction in April, when Mr Trump announced his country-specific tariffs and sparked a global trade war.
A 90-day pause on these import taxes, which has been extended, allowed more normality to resume.
This was borne out by other figures released by the ONS on Friday.
Exports to the United States rose £300m but “remained relatively low” following a “substantial decrease” in April, the data said.
Overall, there was a “large rise in goods imports and a fall in goods exports”.
A ‘disappointing’ but mixed picture
It’s “disappointing” news, Chancellor Rachel Reeves said. She and the government as a whole have repeatedly said growing the economy was their number one priority.
“I am determined to kickstart economic growth and deliver on that promise”, she added.
But the picture was not all bad.
Growth recorded in March was revised upwards, further indicating that companies invested to prepare for tariffs. Rather than GDP of 0.2%, the ONS said on Friday the figure was actually 0.4%.
It showed businesses moved forward activity to be ready for the extra taxes. Businesses were hit with higher employer national insurance contributions in April.
Read more:
Trump plans to hit Canada with 35% tariff – warning of blanket hike for other countries
Woman and three teenagers arrested over M&S, Co-op and Harrods cyber attacks
The expansion in March means the economy still grew when the three months are looked at together.
While an interest rate cut in August had already been expected, investors upped their bets of a 0.25 percentage point fall in the Bank of England’s base interest rate.
Such a cut would bring down the rate to 4% and make borrowing cheaper.
Please use Chrome browser for a more accessible video player
Is Britain going bankrupt?
Analysts from economic research firm Pantheon Macro said the data was not as bad as it looked.
“The size of the manufacturing drop looks erratic to us and should partly unwind… There are signs that GDP growth can rebound in June”, said Pantheon’s chief UK economist, Rob Wood.
Why did the economy shrink?
The drops in manufacturing came mostly due to slowed car-making, less oil and gas extraction and the pharmaceutical industry.
The fall was not larger because the services industry – the largest part of the economy – expanded, with law firms and computer programmers having a good month.
It made up for a “very weak” month for retailers, the ONS said.
Monthly Gross Domestic Product (GDP) figures are volatile and, on their own, don’t tell us much.
However, the picture emerging a year since the election of the Labour government is not hugely comforting.
This is a government that promised to turbocharge economic growth, the key to improving livelihoods and the public finances. Instead, the economy is mainly flatlining.
Output shrank in May by 0.1%. That followed a 0.3% drop in April.
Ministers were celebrating a few months ago as data showed the economy grew by 0.7% in the first quarter.
Hangover from artificial growth
However, the subsequent data has shown us that much of that growth was artificial, with businesses racing to get orders out of the door to beat the possible introduction of tariffs. Property transactions were also brought forward to beat stamp duty changes.
Read more:
Trump to hit Canada with 35% tariff
Woman and three teens arrested over cyber attacks
In April, we experienced the hangover as orders and industrial output dropped. Services also struggled as demand for legal and conveyancing services dropped after the stamp duty changes.
Many of those distortions have now been smoothed out, but the manufacturing sector still struggled in May.
Signs of recovery
Manufacturing output fell by 1% in May, but more up-to-date data suggests the sector is recovering.
“We expect both cars and pharma output to improve as the UK-US trade deal comes into force and the volatility unwinds,” economists at Pantheon Macroeconomics said.
Meanwhile, the services sector eked out growth of 0.1%.
A 2.7% month-to-month fall in retail sales suppressed growth in the sector, but that should improve with hot weather likely to boost demand at restaurants and pubs.
Struggles ahead
It is unlikely, however, to massively shift the dial for the economy, the kind of shift the Labour government has promised and needs in order to give it some breathing room against its fiscal rules.
The economy remains fragile, and there are risks and traps lurking around the corner.
Please use Chrome browser for a more accessible video player
Is Britain going bankrupt?
Concerns that the chancellor, Rachel Reeves, is considering tax hikes could weigh on consumer confidence, at a time when businesses are already scaling back hiring because of national insurance tax hikes.
Inflation is also expected to climb in the second half of the year, further weighing on consumers and businesses.
-
Sports3 years ago‘Storybook stuff’: Inside the night Bryce Harper sent the Phillies to the World Series
-
Sports1 year agoStory injured on diving stop, exits Red Sox game
-
Sports2 years agoGame 1 of WS least-watched in recorded history
-
Sports2 years agoMLB Rank 2023: Ranking baseball’s top 100 players
-
Sports4 years ago
Team Europe easily wins 4th straight Laver Cup
-
Sports2 years agoButton battles heat exhaustion in NASCAR debut
-
Environment2 years agoJapan and South Korea have a lot at stake in a free and open South China Sea
-
Environment2 years agoGame-changing Lectric XPedition launched as affordable electric cargo bike