Business Continuity Exercises, Cyber incident, Real world cyber attack
Anatomy of a Crisis: Deconstructing the Marks and Spencer Cyber Attack
In April 2025, Marks and Spencer was hit by one of the most disruptive cyber attacks the UK has seen. Online sales were halted for 46 days, costing the business around £300 million.
This white paper examines how a single social engineering attack escalated into a full-scale business crisis, despite significant investment in cyber security.
Download the white paper to explore:
- How the attack unfolded
- How Marks and Spencer approached containment, response and recovery
- The operational, financial, and regulatory impact across the business
- Why identity and third-party access are now primary risk areas
- 7 practical resilience lessons for organisations operating in complex environments