UK companies should have to disclose major cyberattacks, M&S says
British businesses should be legally required to report material cyberattacks to the authorities, the chairman of retailer Marks & Spencer said on Tuesday, claiming two recent major attacks on large UK firms had gone unreported.
Giving evidence to lawmakers on parliament's Business and Trade Committee on the April cyberattack which forced M&S to suspend online shopping for nearly seven weeks, Archie Norman said the group had learnt that "quite a large number" of serious cyberattacks never get reported to the National Cyber Security Centre (NCSC).
"In fact we have reason to believe there've been two major cyberattacks on large British companies in the last four months which have gone unreported," he said.
Norman said that meant there was "a big deficit" in knowledge in the cybersecurity space.
"So I don't think it would be regulatory overkill to say if you have a material attack ... for companies of a certain size you are required within a time limit to report those to the NCSC."
Norman declined to say if M&S had paid any ransom but said that subject was "fully shared" with the National Crime Agency and other authorities.
He said "loosely aligned parties" worked together on the M&S cyberattack.
"We believe in this case there was the instigator of the attack and then, believed to be DragonForce, who were a ransomware operation based, we believe, in Asia."
A hacking collective known as Scattered Spider that deploys ransomware from DragonForce has previously been blamed in the media for the attack.
"When this happens you don't know who the attacker is, and in fact they never send you a letter signed Scattered Spider, that doesn't happen," said Norman.
He said M&S didn't hear from the threat actor for about a week after it initially penetrated its systems on April 17 through a "social engineering" operation.
In May, M&S said the attack would cost it about 300 million pounds ($409 million) in lost operating profit.
Norman said M&S was fortunate in having doubled its
cyberattack insurance
cover last year, though its claim could take 18 months to process.
M&S resumed taking online orders for clothing lines on June 10 after a 46-day suspension but is yet to restore click and collect services.
Last week, M&S CEO Stuart Machin told investors the group would be over the worst of the fallout from the attack by August.
Nick Folland, M&S' General Counsel, told the lawmakers a major lesson from the crisis for businesses generally was to make sure they can operate with pen and paper.
"That's what you need to be able to do for a period of time whilst all of your systems are down," he said.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Indian Express
19 minutes ago
- Indian Express
S&P rating upgrade: how India earned it and what lies ahead
Last week was turning out to be a great one for the Indian economy even before Prime Minister Narendra Modi announced a raft of reforms in his Independence Day speech. A day earlier, S&P Global Ratings had upgraded its rating on India to BBB from BBB-. The sovereign rating upgrade by S&P is significant for two key reasons. One, it came after a gap of nearly two decades; and two, it has meaningful implications for the Indian economy. India's upgrade pursuit The Indian government has over the last several years aggressively pursued the three global agencies — S&P, Moody's, and Fitch Ratings — for higher ratings that, in its opinion, better reflect the economy's fundamentals. In fact, New Delhi has repeatedly expressed its displeasure over the agencies' methodologies, saying they were biased against emerging economies. The Economic Survey for 2020-21 even had a chapter titled 'Does India's Sovereign Credit Rating reflect its fundamentals No!'. 'The rating of India did not capture India's fundamentals for almost a decade,' Soumya Kanti Ghosh, State Bank of India's Group Chief Economic Adviser, said in a note on August 14. So, what has convinced S&P that now is a good time for India to be given an upgrade? Steady economic improvement The primary reason is clarity on the government's finances. While the Centre has had a law called the Fiscal Responsibility and Budget Management Act since 2003 — it demands reducing the annual fiscal deficit to 3 per cent of GDP — it has rarely been met. In fact, only once since the Act's enactment has the Centre's fiscal deficit fallen below 3 per cent, in 2007-08, and that was primarily due to some financial jugglery. It was in January 2007 that S&P had last upgraded its rating on India. However, post the coronavirus pandemic, the fiscal deficit has been reduced aggressively from 9.2 per cent in 2020-21 to a targeted 4.4 per cent in 2025-26. Going forward, the Centre will start targeting a reduction in its debt-to-GDP from 57.1 per cent in 2024-25 to 49-51 per cent by 2030-31. Then there is growth. Despite GDP growth falling to a four-year low of 6.5 per cent in 2024-25, India remains one of the fastest growing large economies in the world — or in S&P's words, 'among the best performing economies in the world'. And this is real, or inflation-adjusted, growth; nominal growth — which is the actual increase in the GDP in today's prices — is even higher. When it comes to calculating the debt-to-GDP ratio, it is the nominal GDP that matters. As such, as long as nominal GDP growth is higher than the pace with which the debt is increasing, the debt-to-GDP ratio will keep falling. Another key factor has been the fairly low and stable domestic inflation, with S&P praising the Reserve Bank of India's inflation management record. As per latest data, India's headline inflation rate had fallen to 1.55 per cent in July — the lowest since mid-2017. Low and stable inflation is crucial to foreign investors as sharp increases in prices can erode their investments, weaken growth and the domestic currency, and create social unrest — all factors that can lead to a rating downgrade. A credit rating is nothing more than a measure of an entity's creditworthiness, or how likely it is that they may pay back borrowed money. If you pay back your loans and credit card bills on time and in full, your credit score improves. It is the same for countries. Most countries need to borrow money every year to fund some of their expenditures. The difference between the total income and the expenditure for a year is the fiscal deficit; the Indian government's is Rs 15.69 lakh crore for 2025-26. This has to be met by borrowing money from the markets, with the government paying interest on it. Now, if the government is seen as being more likely to repay the loan — which is what a higher credit rating indicates — then the rate of interest is lower. According to Madhavi Arora, Chief Economist at Emkay Global Financial Services, the rating upgrade 'can open the door for new pools of global funds' capital', resulting in 'lower cost of funding across macro agents' curves, including corporates — especially those borrowing abroad'. The rating scale To be sure, India's rating level with S&P has itself not changed — the country remains in the BBB category. It's just that it has gone from the lowest edge of it, or BBB-, to a more secure position. The next step would be BBB+. So where does the move to BBB put India on the rating scale? Ratings are divided into two rough classes: investment and speculative grades. Entities, including countries, in the former class are worth investing in, while repayment of loans taken by those in the latter is difficult to predict. But even within the investment grade, there are steps, and BBB is the lowest. According to S&P, a BBB rating indicates 'adequate capacity to meet financial commitments, but more subject to adverse economic conditions'. The next step is A, then AA, and finally, AAA, which signifies 'extremely strong capacity to meet financial commitments'. Who stands where Alongside India, S&P has the likes of Greece, Mexico, and Indonesia at BBB. Just above it, at BBB+, are Botswana (negative outlook), Bulgaria, Italy, Thailand, Uruguay (all stable outlook), and Philippines (positive outlook) A positive outlook puts a rating closer to an upgrade, while a negative outlook makes a downgrade more likely. Above this, with an A- rating, are countries such as Cyprus, Poland, and Malaysia. And right at the top of the tree, with AAA rating, are the richest countries in the world — Australia, Canada, Denmark, and Germany, among others. The richest countries are not guaranteed the best rating. Take the US, for instance, which was downgraded to AA+ by S&P in August 2011 — the first time the world's largest economy had ever been assigned any rating lower than AAA — days after the US Congress raised the country's debt ceiling. More recently, Moody's Ratings in mid-May 2025 lowered its rating on the US to Aa1 from Aaa reflecting 'the increase over more than a decade in government debt and interest payment ratios to levels that are significantly higher than similarly rated sovereigns'. What's next? The implications of a better credit rating are clear — the Indian government should be able to borrow at a lower rate of interest. This has already occurred, with government bond yields in the secondary market on August 14 falling as much as 10 basis points, with the rupee's exchange rate also getting a boost. What about the next upgrade? Helpfully, S&P said on August 14 that it may further raise India's rating if the fiscal deficit of the Centre and states falls below 6 per cent of GDP on a structural basis. This, however, is a 'tough ask', according to Arora of Emkay Global. S&P itself expects the combined fiscal deficit to decline only to 6.6 per cent in 2028-29 from 7.8 per cent in 2024-25.
Time of India
33 minutes ago
- Time of India
FinMin to meet CEOs of state-owned banks to review Q1 performance on Aug 20
The finance ministry has called a meeting of heads of public sector banks (PSBs) on Wednesday to review the first-quarter financial performance . Independence Day 2025 Modi signals new push for tech independence with local chips Before Trump, British used tariffs to kill Indian textile Bank of Azad Hind: When Netaji Subhas Chandra Bose gave India its own currency The meeting is scheduled to be chaired by Financial Services Secretary M Nagaraju. The review meeting on August 20 with public sector banks to assess the performance of the first quarter of 2025-26, according to sources. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Undo Led by State Bank of India (SBI), public sector banks, cumulatively, logged a record profit of Rs 44,218 crore in the first quarter of the current fiscal, with an 11 per cent year-on-year growth. All 12 public sector banks together made a profit of Rs 39,974 crore in the June quarter of FY25. The increase in profit in absolute terms was Rs 4,244 crore. Live Events Market leader SBI alone contributed 43 per cent to the total earnings of Rs 44,218 crore, as per the published numbers on stock exchanges. SBI logged a net profit of Rs 19,160 crore in Q1 FY26, 12 per cent higher than the same period of the previous fiscal. In terms of size and profits, the biggest lender in the nation still controls the public banking market. In percentage terms, Chennai-based Indian Overseas Bank reported the highest net profit growth of 76 per cent to Rs 1,111 crore, followed by Punjab & Sind Bank with a 48 per cent rise to Rs 269 crore. During the quarter, all 12 public sector banks (PSBs) except Punjab National Bank ( PNB ) reported a decline in profit. PNB reported a 48 per cent fall in net profit to Rs 1,675 crore against Rs 3,252 crore in the year-ago period. Central Bank of India recorded 32.8 per cent growth in the June quarter net profit to Rs 1,169 crore, Indian Bank posted 23.7 per cent rise to Rs 2,973 crore, and Bank of Maharashtra logged 23.2 per cent improvement to Rs 1,593 crore.
Time of India
36 minutes ago
- Time of India
Big believer in law of land, customer-centricity: Amazon India head on regulatory gaze over e-commerce platforms
Amid a growing regulatory scrutiny on online platforms, Amazon India head Samir Kumar has asserted that the e-commerce company is a "big believer" in customer-centricity and adherence to local laws, and is fully prepared to address any findings and ensure consumers remain well supported. Independence Day 2025 Modi signals new push for tech independence with local chips Before Trump, British used tariffs to kill Indian textile Bank of Azad Hind: When Netaji Subhas Chandra Bose gave India its own currency The comment comes at a time when there is rising regulatory glare on online companies. The Central Consumer Protection Authority (CCPA) had issued an advisory to e-commerce platforms to conduct self-audits to detect 'dark patterns' and ensure they are swiftly eliminated. The self-declarations by the platforms will enable fair digital ecosystem along with building trust between consumers and e-commerce platforms, CCPA had said in June. On how the company views and responds to the regulatory scrutiny in the market, Kumar told PTI that Amazon has always prioritised customer focus. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Undo "So we have always believed that first of all, whatever we do, we should make sure that the customers love it. So that's my take on there will always be some of these things that will come our way in terms of making sure here are things that you should be doing, and we'll go and audit our systems and make sure we are doing all the right things," he said. Kumar added, "We have always believed that we put customers front and centre of everything, and when we see issues with our customer experience, we go and spend all our energy in fixing that, and we'll continue to do that in future." Live Events Asked if the company believes that the regulatory lens from authorities such as CCPA or CCI signal a vibrant, expanding market, Kumar emphasised that Amazon is firmly committed to abiding by the country's laws. "We are a big believer in complying with the law of the land, we have always made sure that wherever we operate, we operate in a compliant way. "So that way, whether it's Competition Commission or CCPA, all those bodies are making sure that Indian consumers are not hurt, and we are a big believer in making sure that we take care of our customers," he said. He emphasised that Amazon is fully prepared to address any findings and ensure customers remain well supported. "So I am more than happy to make sure that whatever the finding is, we address them and we take care of our customers," Kumar said. India is expected to be one of the biggest contributors to Amazon's growth in the long run, with the e-commerce giant doubling down on its focus in this market where it is pouring in billions of dollars in long-term investments. India is still not as deeply penetrated in terms of online consumption and therefore presents a "very large opportunity" for Amazon, according to Kumar - who is now helming operations here as Country Manager of Amazon India. Amazon has committed to significant investment in its India infrastructure, about Rs 2,000 crore for 2025 alone. It had previously outlined a broader investment pledge of USD 26 billion by 2030, close to about USD 15 billion of it between 2023 and 2030. Kumar said India is among the fastest growing markets for the company. "And we are a big believer that in the long run, India will be one of the biggest contributors to our growth," Kumar said but did not give a timeframe. India is still not deeply penetrated in terms of consumption, he said, adding while users are online, buying products and watching videos there is a huge headroom for growth when it comes to online shoppers. "...not everyone is shopping online. If you look at just mobile phone penetration, maybe it's in close to a billion people who have mobile phones, but only 100 million plus of them are shopping online. So the next 200 million (that the company is aspiring to reach) are going to be part of that," he said. Kumar believes that as the economy grows, and so does consumption, and as GDP per capita rises, India is poised to have "many more consumers who will value the convenience of shopping online". "We have seen this phenomenon around the world. So we have a very large opportunity still remaining in India... We have 1.4 billion people," he said. The company has set its sights on what Kumar describes as a broader 'Bharat' living in tier 2, 3 cities and beyond. "Let's take a good chunk of that and make sure that they are able to come online, shop online, get the best value, and get the fastest delivery possible. And with that, I believe there's a big opportunity. So beyond the tier one cities, there's a huge opportunity in 'Bharat', which is like tier 2, 3 cities, where we are seeing very deep penetration now starting to happen," he said.
