a day ago
- Business
- South Wales Argus
M&S cyber attack a warning to retailers, says lawyer
This is according to Clarke Willmott, a national law firm.
The attack, reportedly involving a third-party payroll provider, compromised customers' personal data over the Easter weekend.
Chidem Aliss, a partner in the firm's commercial and IT team, said: "There's a temptation to view this purely as an IT failure, but that's missing the wider point.
"In today's climate, with increasingly sophisticated attacks and a complex web of third-party systems, the question isn't if a breach will occur, it's how well you respond when it does."
Thompsons Solicitors Scotland is currently pursuing compensation claims against M&S for the data breach.
Mr Aliss emphasised the shift in public and legal expectations, stating: "Retailers must prove they took reasonable steps to prevent breaches and responded quickly.
"When customers or employees feel kept in the dark, reputational damage and claims follow."
He also highlighted the importance of managing supplier risks, with customer and employee data often managed through third-party platforms.
Mr Aliss concluded: "This isn't about pointing fingers.
"Think of it like fire safety.
"You hope never to need your emergency plan, but when the alarm sounds, it's too late to write one."
