{"id":51369,"date":"2025-04-28T14:05:36","date_gmt":"2025-04-28T14:05:36","guid":{"rendered":"https:\/\/sotnews.agency\/?p=51369"},"modified":"2025-04-28T14:05:36","modified_gmt":"2025-04-28T14:05:36","slug":"ms-customers-in-limbo-as-cyber-attack-chaos-continues","status":"publish","type":"post","link":"https:\/\/sotnews.agency\/?p=51369","title":{"rendered":"
M&S customers in limbo as cyber attack chaos continues<\/div>"},"content":{"rendered":"
\n
\n \t<\/i> Read Time:<\/span>4 Minute, 14 Second <\/div>\n\n <\/div>
\n

Marks and Spencer (M&S) customers have been telling the BBC of their frustration as disruption caused by the cyber attack which has hit the retailer continues into another trading week.<\/p>\n

The incident \u2013 which it disclosed last Monday \u2013 has caused delayed parcels,\u00a0paused online orders\u00a0and suspended gift card payments, and has seen the retailer take down several parts of its operations over the last few days.<\/p>\n

It has yet to disclose the nature of the cyber attack or when it expects operations to return to normal. Some customers told the BBC that M&S\u2019 communication over affected orders has been \u201cdisappointing\u201d.<\/p>\n

Analysts warn the incident\u00a0may affect the retailer\u2019s reputation.<\/p>\n

Its share price fell by 2.5% in morning trading on Monday and is down almost 10% over the past week.<\/p>\n

Customers have been telling the BBC of the impact the situation is having on them.<\/p>\n

Linda Sonntag, who lives in Norwich, told the BBC she was left \u201cdisappointed\u201d after a flower delivery arranged for a friend never arrived.<\/p>\n

She told the BBC she was still awaiting a refund and email with information about her order.<\/p>\n

\u201cIn the meantime I\u2019ve had to order flowers from somewhere else,\u201d she said.<\/p>\n

\u201cI don\u2019t blame them, they\u2019ve had a cyber attack,\u201d Ms Sonntag added.<\/p>\n

\u201cBut I don\u2019t think their attitude towards their customers is very helpful.\u201d<\/p>\n

Dawn Cunnington, of Exeter, agreed the company was not to blame, but said she had no communication from M&S about her own flower order not being fulfilled.<\/p>\n

She had ordered flowers on Wednesday, on behalf of her 91-year-old mother, for her mother\u2019s friend, who was celebrating their 90th birthday.<\/p>\n

\u201cI\u2019d had nothing from them until I phoned up,\u201d she told the BBC.<\/p>\n

Ms Cunnington said she received a refund and a \u00a310 apology voucher after calling M&S to find out what happened to the flowers, but was \u201ca bit cross\u201d they had allowed her to place the order in the first place, given it was aware of cyber incident.<\/p>\n

Other customers have described having to cancel orders for clothes which they were expecting to collect before going on holiday, or being unable to return goods they had previously bought.<\/p>\n

But some have expressed sympathy for the staff at the stores, who they say have been on the receiving end of abuse from angry customers, or having to deal with shopping abandoned at the tills when customers were unable to pay when contactless payments were down.<\/p>\n

Working round the clock<\/h2>\n

M&S remains silent on how the cyber attack unfolded, the nature of the attack and how specifically it has been affected by it \u2013 leaving cyber security experts to speculate as to what might have happened.<\/p>\n

It is known it has hired external cyber security experts, who are likely to be a team of incident response specialists who will be working around the clock either at the headquarters of the company or remotely.<\/p>\n

Their first priority is likely to be find out where the hackers are in the IT system and kick them out.<\/p>\n

Switching off computer servers used in their online ordering, payment or logistics systems might imply that security teams have isolated that portion as a way the hackers gained entry.<\/p>\n

They might also have taken these offline to stop the hackers from spreading their malicious software into those previously unaffected areas.<\/p>\n

It might also be the case that the company is taking all non-business critical services offline to help deal with the hack.<\/p>\n

\u201cIn situations like this, in-store services are typically prioritised for recovery, which can mean online operations take slightly longer to restore,\u201d said Sam Kirkman, a director at cyber-security firm NetSPI.<\/p>\n

He told the BBC that while M&S taking steps like pausing services may make the incident seem \u201ceven more serious from the outside,\u201d they would allow staff to contain any potential threats and begin recovery safely.<\/p>\n

Reputational risk<\/h2>\n

About a third of M&S\u2019s clothing and household goods\u2019 sales in the UK are through its online platforms and were worth some \u00a31.268bn in latest published financial results.<\/p>\n

Susannah Streeter, head of money and markets at Hargreaves Lansdown, said even though M&S\u2019s physical stores were still open, many of them \u201csimply don\u2019t stock the popular ranges from online\u201d.<\/p>\n

She added clothes sales were \u201clikely to take a big hit\u201d as the cyber-attack had occurred during a spell of warm weather when summer ranges would be \u201cpiling up in virtual baskets\u201d.<\/p>\n

Dan Coatsworth, investment analyst at AJ Bell, said M&S\u2019s success was \u201cbuilt on trust\u201d \u2013 and this was something customers may question after it suspended online orders.<\/p>\n

\u201cThe longer it takes to draw a line under the cyber incident, the greater the risk to Marks & Spencer\u2019s reputation,\u201d he told the BBC.<\/p>\n

\u201cShoppers want to know that their personal and financial details are safe when buying goods online and Marks & Spencer failing to give the all-clear implies that something is very wrong at its end.\u201d<\/p>\n<\/p>\n<\/div>\n

\n
\n \n
\n \n \"Happy\"\n <\/a>\n
\n Happy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sad\"\n <\/a>\n
\n Sad <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Excited\"\n <\/a>\n
\n Excited <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sleepy\"\n <\/a>\n
\n Sleepy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Angry\"\n <\/a>\n
Angry<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n \n <\/div>\n <\/div>\n\n
\n \n \"Surprise\"\n <\/a>\n
Surprise<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n\n ","protected":false},"excerpt":{"rendered":"

Marks and Spencer (M&S) customers have been telling the BBC of their frustration as disruption caused by the cyber attack which has hit the retailer continues into another trading week. The incident \u2013 which it disclosed last Monday \u2013 has caused delayed parcels,\u00a0paused online orders\u00a0and suspended gift card payments, and has seen the retailer take […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_2277560469115098_106292521332774":"","twitter_aToxNzczMzI3Njk4OTg4ODUxMjAxOw==_1773327698988851200":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-51369","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-blog"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/sotnews.agency\/index.php?rest_route=\/wp\/v2\/posts\/51369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sotnews.agency\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sotnews.agency\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sotnews.agency\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sotnews.agency\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=51369"}],"version-history":[{"count":0,"href":"https:\/\/sotnews.agency\/index.php?rest_route=\/wp\/v2\/posts\/51369\/revisions"}],"wp:attachment":[{"href":"https:\/\/sotnews.agency\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sotnews.agency\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=51369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sotnews.agency\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=51369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}