EXCLUSIVE I'm a cyber expert - the recent attacks on M&S and Harrods are no coincidence... and customers could now be in danger

Daily Mail​

02-05-2025

The cyber attacks on M&S and Harrods occurring within the space of a few days are not a coincidence, an expert has warned.
Joe Jones, CEO and founder of cybersecurity app Pistachio, said customers may be in danger from the attacks due to the 'enormous amount' of consumer data both major retailers hold.
Yesterday, luxury London department store Harrods confirmed it has been targeted by cyber hackers, leaving some customers unable to make purchases.
It came just days after similar incidents in recent days at both M&S and the Co-op, sparking fears the attacks could be linked.
Mr Jones told MailOnline: 'It's too early to confirm if the attacks are coordinated, but the close timing suggests either a targeted campaign or that attackers are exploiting the same vulnerability across multiple retailers.
'It's also entirely possible that news of one successful breach inspired malicious actors to opportunistically launch follow-ups while the industry is distracted and vulnerable.'
Mr Jones added that the attacks are 'absolutely' a cause for concern, particularly for customers who have shared personal data with the retailers.
'Retail companies hold an enormous amount of consumer data, from payment information to passwords (often reused by customers across multiple sites) to customer behavioural insights,' he said.
'As a result, any breach can have serious consequences for both businesses and customers.'
Mr Jones added: 'This should be a wake up call not just for retail, but for any industry that handles sensitive customer data.
'Cybersecurity is no longer just an IT issue - it's a board-level, business critical priority. Companies need to assume they will be targeted and build resilience accordingly.'
A Harrods spokesperson said yesterday: 'We recently experienced attempts to gain unauthorised access to some of our systems.
'Our seasoned IT security team immediately took proactive steps to keep systems safe, and as a result, we have restricted internet access at our sites today.
'Currently, all sites including our Knightsbridge store, H beauty stores and airport stores remain open to welcome customers.
'Customers can also continue to shop via harrods.com.
'We are not asking our customers to do anything differently at this point, and we will continue to provide updates as necessary.'
Harrods is understood to be using specialists to help fix and investigate the problem.
Scotland Yard detectives are probing the devastating IT meltdown at M&S thought to be caused by teenage hackers, it was reported this week.
A shadowy group operating under the name Scattered Spider was previously said to be behind the M&S attack, which has crippled the retailer for more than a week.
Detectives have been working alongside the National Cyber Security Centre and data watchdog the Information Commissioner's Office (ICO).
Bosses at the retailer are said to have asked for help from experts at Microsoft as well as cyber security professionals CrowdStrike and Fenix24.