Anatomy of a Crisis: Deconstructing the Marks and Spencer Cyber Attack

Anatomy of a Crisis: Deconstructing the Marks and Spencer Cyber Attack

In April 2025, Marks and Spencer was hit by one of the most disruptive cyber attacks the UK has seen. Online sales were halted for 46 days, costing the business around £300 million.

This report examines how a single social engineering attack escalated into a full-scale business crisis, despite significant investment in cyber security.

Download the report to explore:

• How the attack unfolded
• How Marks and Spencer approached containment, response and recovery
• The operational, financial, and regulatory impact across the business
• Why identity and third-party access are now primary risk areas
• 7 practical resilience lessons for organisations operating in complex environments