In April 2025, Marks & Spencer (M&S) was the latest high-profile target in a wave of sophisticated cyberattacks affecting major UK retailers. The attack exposed just how vulnerable even the most established businesses can be—and why proactive cybersecurity and cyber insurance are essential in today’s digital-first economy.
What Happened to M&S?
The cyberattack on M&S was carried out by a known ransomware group with suspected ties to both UK and US-based individuals. The attackers deployed ransomware, which not only encrypted vital systems but also extracted sensitive internal data, including files from Microsoft’s Active Directory.
The hackers reportedly demanded a ransom of £10 million, although M&S has not confirmed any payments or negotiations.
Major Disruption Business Operations
The impact of the attack was felt across multiple areas of M&S’s operations:
- Digital Sales Grounded: Online orders and mobile app functionality for clothing and home goods were brought to a halt, directly affecting revenue during a key retail period.
- Payment Issues in Stores: Customers experienced issues with contactless payments and Click & Collect services, undermining customer trust and convenience.
- Warehouse Closures: The attack forced M&S to send home around 200 agency workers as one of their distribution hub’s system were down.
Financial Fallout: Investor confidence dipped sharply, with the company’s share price falling by 7% and nearly £700 million wiped off its market value in just a few days.
M&S estimates it’s ongoing cyber incident to cost around £300m and their CEO has called this a ‘bump in the road’ and new cyber security measures will need to be put in place to ensure it doesn’t happen again.
Why Cyber Insurance Should Be Part of Every Business Strategy
Cyber insurance is no longer a luxury—it’s a strategic necessity. Here’s why it matters:
- Business Continuity: Cyber insurance helps cover loss of income during business interruption caused by attacks like ransomware.
- Incident Response Support: Insurers often provide access to breach response experts, including legal, PR, and IT forensic teams.
- Financial Protection: From ransom payments to regulatory fines, cyber insurance can help manage the rising costs associated with cybercrime.
- Peace of Mind: Knowing your business has a safety net can give leadership teams confidence to operate and grow in a digital environment.
A report by Ponemon highlighted the growing impacts of ransomware attacks, presenting 58% of ransomware victims in 2024 were forced to shut down operations to recover, while 40% reported significant revenue losses as a result of the attack.
Get in touch about Cyber Insurance
The M&S cyberattack should serve as a wake-up call for businesses of all sizes. Investing in proactive cybersecurity measures and ensuring you have a tailored cyber insurance policy in place could be the difference between recovery and collapse in the face of a major breach.
Don’t wait for a crisis—protect your digital future today. Speak to our team of commercial insurance specialists about your Cyber Insurance requirements. Call us on 01270 449449 or complete our enquiry form and we’ll be in touch as soon as possible.