{"id":18354,"date":"2025-05-07T04:44:33","date_gmt":"2025-05-07T04:44:33","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/uk-retailer-hacked-online-ops-disabled\/"},"modified":"2025-05-07T04:44:33","modified_gmt":"2025-05-07T04:44:33","slug":"uk-retailer-hacked-online-ops-disabled","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/uk-retailer-hacked-online-ops-disabled\/","title":{"rendered":"UK retailer hacked, online ops disabled"},"content":{"rendered":"\n
Here is the rewritten content without changing its meaning, retaining the original length, and keeping proper headings and titles as required:<\/p>\n
\n

<\/p>\n

<\/p>\n

A group of cybercriminals successfully breached the online operations of Marks & Spencer<\/a> last month by exploiting a basic human vulnerability. The hackers posed as legitimate employees and called the IT help desks, convincing the staff to reset passwords for the accounts they had impersonated. With the obtained credentials, they infiltrated the company network and disabled its website and app ordering systems. Two weeks after the incident, customers are still unable to place clothing and home orders online, while M&S claims to be working \u201cday and night\u201d to restore services. However, the retailer has not provided a timeline for resuming online orders and has yet to disclose the financial impact of the disruption.<\/p>\n

Impact on Retailer\u2019s Customers<\/h2>\n

The cybercrime has significantly affected M&S customers, with disruptions first reported over the Easter weekend. Customers experienced issues with Click & Collect and contactless payments, which the company confirmed were due to a \u201ccyber incident.\u201d Although these services have resumed, online orders on the website and apps were paused last week, with no timeline for when they will restart.<\/p>\n

In-store, some food items remain unavailable as M&S continues to take systems offline to manage the attack. Signs on empty shelves read: \u201cPlease bear with us while we fix some technical issues affecting product availability.\u201d The retailer had hoped to restore full food availability by the end of the week, but it remains unclear whether that target will be met.<\/p>\n

Additionally, M&S has temporarily removed all job adverts from its website, displaying a message stating: \u201cSorry you can\u2019t search or apply for roles right now, we\u2019re working hard to be back online as soon as possible.\u201d<\/em><\/p>\n

Cybersecurity Experts\u2019 Warning to UK Businesses<\/h2>\n

According to a report by BleepingComputer, Britain\u2019s National Cyber Security Centre has advised all organisations to audit their help-desk procedures to prevent such incidents. In a joint blog post, Jonathon Ellison and Ollie Whitehouse, national resilience director and chief technology officer at Britain’s cyber security centre, respectively, said: \u201cCriminal activity online \u2013 including, but not limited to, ransomware and data extortion \u2013 is rampant. Attacks like this are becoming more and more common. And all organisations, of all sizes, need to be prepared.\u201d<\/em><\/p>\n

Investigators have confirmed that it was a ransomware attack, where malicious software infiltrates computer systems, encrypts critical data or files, and demands payment, often under threat of leaking or selling the stolen information.<\/p>\n

Security experts attribute the breach to a ransomware group known as \u201cDragonForce,\u201d which rents its malware tools to other criminals, making it difficult to identify the exact actors. The Metropolitan Police have confirmed they are investigating the incident.<\/p>\n

\n