M&S Cyberattack Exposes Customer Data, Sparks Urgent Call for Enhanced Security Measures
May 14, 2025
Cybersecurity expert Camellia Chan highlighted the necessity for businesses to adopt advanced, multi-layered security measures to defend against evolving ransomware threats.
A report from Hiscox indicates that cyberattacks are increasing in frequency and complexity across Europe, with a significant rise in incidents reported by Irish organizations.
The UK's National Cyber Security Centre has noted a 16% rise in cyber incidents compared to the previous year, highlighting the nation's vulnerability.
MGM Resorts, after a breach, faced $45 million in legal penalties and increased IT spending, despite recovering over 100% of operating losses.
Experts warn that future breaches will exploit similar vulnerabilities, emphasizing that compliance does not equate to effective control.
Marks and Spencer (M&S) has confirmed a cyber attack that resulted in the theft of customer personal data, complicating their financial forecasts.
This incident raises concerns about potential fines, prolonged sales impacts, and limitations on insurance payouts, making a swift resolution critical for mitigating financial damage.
M&S's insurance policy allows for claims up to £100 million, covering incident response costs and loss of gross profit due to the attack.
Critics have expressed frustration over the lack of transparency from affected companies regarding breaches, emphasizing the need for better security practices and communication.
Organizations are advised to enhance training for helpdesk staff to better identify legitimate contacts and implement stricter verification methods for sensitive requests.
Despite increased awareness, enforcement against loosely organized hacker groups remains challenging due to their recruitment methods and operational structure.
Retailers are increasingly adopting AI-driven solutions for threat detection, yet only a small percentage have implemented these systems, leaving many exposed to advanced cyber tactics.
Summary based on 52 sources
Get a daily email with more Tech stories
Sources

The Guardian • May 16, 2025
Scattered Spider hackers in UK are ‘facilitating’ cyber-attacks, says Google
The Guardian • May 14, 2025
‘Aggressive’ hackers of UK retailers are now targeting US stores, says Google
The Guardian • May 13, 2025
M&S says some personal data was taken in cyber-attack
BBC News • May 13, 2025
M&S says personal customer data stolen in recent cyber attack