
Marks & Spencer blames ‘human error' as cyber attack set to cost £300m
Marks & Spencer has said a damaging cyber attack caused by 'human error' will cost the company around £300 million.
The high street retail giant said disruption to online shopping could continue into July but it hopes to have this partly restored 'within weeks'.
M&S halted orders on its website and saw empty shelves after being targeted by hackers around the Easter weekend.
Customer personal data, which could have included names, email addresses, postal addresses and dates of birth, was also taken by hackers in the attack.
Chief executive Stuart Machin told reporters that hackers gained access to the company's IT systems through a third party after 'human error'.
The boss said he has been in touch with other industry bosses to discuss hacks, with rivals the Co-op and Harrods also targeted with cyber attacks in recent weeks.
He added: 'We didn't leave the door open, this wasn't anything to do with under-investment.
'Everyone is vulnerable. For us, we were unlucky on this particular day through some human error.'
The retailer revealed on Wednesday morning that online sales and profits in its fashion, home and beauty business have been 'heavily impacted'.
Disruption to online operations is set 'to continue throughout June and into July as we restart, then ramp up operations', it said.
However, it indicated that shoppers will see improvements over the coming weeks.
Mr Machin suggested around 85% of its online operations are likely to be restored soon, as the company focuses on certain parts of its operations first.
He added that clothing and home sales have been 'resilient' in stores in recent weeks.
Meanwhile, food sales were affected by reduced availability but the business stressed this is 'already improving'.
The group has also reported 'additional waste and logistics costs' after switching to manual processes following the attack.
M&S said the incident is likely to drag its group operating profits down by around £300 million this year, but it expects this to be reduced through cost management, insurance and other reactions.
The company suggested it could reduce the impact of the attack by as much as 'half'.
Mr Machin said: 'It has been challenging, but it is a moment in time, and we are now focused on recovery, with the aim of exiting this period a much stronger business.
'There is no change to our strategy and our longer-term plans to reshape M&S for growth and, if anything, the incident allows us to accelerate the pace of change as we draw a line and move on.
'This incident is a bump in the road, and we will come out of this in better shape, and continue our plan to reshape M&S for customers, colleagues and shareholders.'
It came as the company reported a higher-than-expected adjusted pre-tax profit of £875.5 million for the year to March, up 22.2% on the previous year.
The group was buoyed stronger profits in its food arm, which saw sales increase by 8.7% to £9 billion over the year.
M&S revenues grew by 6% to £13.8 billion as a whole for the year, as fashion, home and beauty sales grew by 3.5%.
The company is currently undergoing a major transformation programme, which is including changes to its shop estate.
The retailer, which currently has 565 stores, said it plans to have 600 stores by 2028, comprising 420 bigger food stores and 180 full clothing, home and food stores.
It added that the plan is still on track despite the recent disruption.
M&S also said it has accelerated plans to invest in improvements to its technology to now take place over the next six months, after previously indicating it would take two years.

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Telegraph
30 minutes ago
- Telegraph
Thomas Frank ally is leading search for new Tottenham manager
Tottenham Hotspur have cleared the decks for Ange Postecoglou's successor to arrive with a new backroom team by dismissing three of the Australian's staff, but Johan Lange has remained as sporting director to lead the search for a new head coach. Assistant coaches Mile Jedinak, Nick Montgomery and Sérgio Raimundo have followed Postecoglou out of the exit. Senior assistant coach Matt Wells and goalkeeping coach Rob Burch have remained in position, although it remains to be seen whether or not that changes when a new appointment is made. Sources believe that Thomas Frank is interested in taking over from Postecoglou and that he would ideally want to take a number of members of his Brentford backroom staff with him to Spurs. As revealed by Telegraph Sport, Tottenham sacked Postecoglou and chief football officer Scott Munn on Friday, but Lange has not been part of the cull. His position remains unchanged and he is expected to be helped by Fabio Paratici. Paratici has remained a consultant to Spurs and chairman Daniel Levy, and is expected to return to a full-time post at the club this summer once his worldwide football ban is lifted. Spurs understood to be 'carefully assessing' options Frank is considered a leading candidate to succeed Postecoglou, although his exit fee – believed to be in the region of £10 million – may still provide a stumbling block and interest has existed in Fulham manager Marco Silva and his Bournemouth counterpart Andoni Iraola. Tottenham are said to be carefully assessing their options, with Levy aware of the expense involved in hiring Frank, and Lange perfectly positioned to assess his capabilities for the post. Lange and Frank used to share an office when they were coaching together at Danish club Lyngby, and are said to have maintained a good relationship. That could be a boost to Frank, although Lange may also be aware of any of the potential drawbacks in Tottenham replacing Postecoglou with a coach who has never managed in a full European competition and is yet to win a title. As well as presenting their preferred candidate for the head coach role to Levy and the Spurs board, Lange and Paratici are expected to take responsibility for the club's summer transfer window. That may include decisions over the futures of defender Cristian Romero, who is wanted by Atlético Madrid and captain Son Heung-min, who has left some players and staff with the impression he could leave Spurs amid interest from Saudi Arabia. Telegraph Sport reported that Levy is facing the threat of a Tottenham player revolt over the decision to sack Postecoglou and the way in which it was done, and Son has led a number of dressing-room tributes to the Australian. In a message posted on Instagram, Son wrote: 'Gaffer. You've changed the trajectory of this club. You believed in yourself, and us, since day one and never wavered for a second. Even when others did.


BBC News
33 minutes ago
- BBC News
Man dies after being hit by van in Scarborough
A man has died after being hit by a van outside a church in North incident took place outside the Jehovah's Witness Church at the junction of Westbourne Park with Seamer Road, in Scarborough, at around 09:25 BST on man, aged in his 80s, was taken to hospital, but has since Yorkshire Police said the driver of the silver Volkswagen Transporter van will be interviewed, but anyone with any information or dashcam footage is asked to get in touch. Listen to highlights from North Yorkshire on BBC Sounds, catch up with the latest episode of Look North.


Daily Mail
35 minutes ago
- Daily Mail
EXCLUSIVE How YOU could find yourself wrongly accused of 'pump and dash' and hit with a £60 fine - as alleged petrol thefts hit all-time high
Petrol thefts have soared to an all-time high, figures suggest. MailOnline can reveal that 110,000 charges for alleged 'pump and dash' thefts were issued by two major fuel security firms last year. This marks a 20-fold rise in just six years. Industry bigwigs insist there has been genuine increase in drivers fleeing forecourts without paying, or 'bilking', especially in the wake of the cost of living crisis. Yet drivers say they have been incorrectly stung with threatening letters demanding hefty 'admin fees' on top of their supposedly unpaid petrol or diesel. In an attempt to recoup the costs of stolen fuel for petrol stations, many of which are independently owned, Forecourt Eye and British Oil Security Syndicate (BOSS) scan forecourts with numberplate-recognition technology. The two companies work with hundreds of filling sites and are considered among the biggest in the sector. Between the duo, they fired off nearly 113,000 requests to the DVLA for driver details last year. This is up from around 5,500 in 2018, according to data MailOnline obtained from the DVLA through Freedom of Information. Firms only request such data, which costs £2.50 a time and includes the car owner's name and address, if they intend to recover costs for non-payment of fuel. As well as seeking to recuperate the alleged unpaid fuel, companies may slap on their own admin fees. Forecourt Eye bolts on a £60 add-on. Drivers may feel pressured into paying up, even if they already forked out at the time. Some claim to have been threatened with being banned from forecourts up and down the country. There are several ways motorists can wrongly be accused of a 'pump and dash'. For example, if your card was declined and neither you nor the cashier noticed before you drove off, you are likely to be sent a demand. If a criminal has cloned your plates and genuinely steals petrol, you could also be on the hook for any fuel they have stolen. Criminal gangs have also been known to use entirely fake plates to dodge paying for fuel. Drivers also risk being falsely accused of bilking if a cashier selected the wrong pump (or failed to select one at all) when totting up your bill. If this happened, it would mean your fuel was technically never paid for, even if you paid for someone else's. This is the equivalent of a supermarket cashier failing to scan an item at checkout. Chris Mullen, for example, was accused of not paying £7.80 for petrol – even though he was driving a diesel car and filled up £30 worth of fuel. Despite fighting the claim from Forecourt Eye, thought to be caused by staff error, the 63-year-old from Stalham, Norfolk, said the firm 'insisted this was the case'. He was slapped with a £60 admin charge on top of the petrol he allegedly owed. After appealing, Tesco did issue a refund and an apology to him as well as a £10 gift card, which the motorist branded 'something of an insult'. Tesco told the Great Yarmouth Mercury that its processes were 'regularly reviewed' with regular meetings and new staff training to 'prevent errors from occurring'. Social media and forums are littered with similar stories of motorists claiming to have been falsely accused of driving off without paying. MailOnline's analysis can't prove genuine thefts have risen, it only shows that reports have gone up. Police data, however, suggests more than 27,000 alleged thefts occurred last year, in line with levels in 2020. About 95 per cent of cases are canned with no suspect being identified. Cops themselves moan they have 'finite resources' to probe suspected thefts. The Petrol Retailers Association, whose members run two-thirds of forecourts, says bilking robs them of around £100million a year. Petrol stations themselves have resorted to shaming 'pump and dashers' online in a bid to claw back the stolen fuel. One forecourt in Hythe, Kent, last summer shared CCTV footage of a blue car filling up with £120 of petrol before the driver got straight back into his vehicle and casually zoomed off without attempting to pay. Owner Sutha Hari, 49, claimed she wasn't going to bother alerting the police because 'nothing ever comes of it'. While there is no specific offence code for robbing from fuel pumps, it falls under the 'making off without payment' umbrella. It also covers restaurant 'dine and dashers', as well as people who make off without paying taxi drivers at the end of journeys. Thieves can be jailed for up to two years. Experts say petrol theft pushes up prices for law-abiding motorists. Steve Gooding, director of the RAC Foundation, said: 'It would be tempting to suspect that the cost-of-living crisis is pushing normally law-abiding people into committing this type of offence, but that would be an insult to the vast majority of people who continue to obey the law whatever their circumstances. 'Repeat criminals might well be pushing their luck more than ever because they believe other pressures on the police are such that they'll get away with it. 'Drive-offs might be seen as relatively low-level crimes in the grand scheme of things but they are corrosive to society, damaging to businesses and ultimately push up pump prices for law-abiding motorists and riders. 'More is being done to prevent these crimes through adoption of better surveillance systems and pay-at-pump options, but the numbers suggest the problem has been getting worse, with tens of thousands of drive-away fuel thefts each year. 'Those tempted to refuel without paying need to feel there is a real threat of being caught and punished.'