UK Retail Under Siege: Cyberattacks Disrupt Marks & Spencer and Co-op

FMCG
April 30, 2025

Marks & Spencer: Cyberattack Leads to Operational Disruptions

M&S recently suffered a significant cyberattack, reportedly orchestrated by the hacking group “Scattered Spider.” The breach crippled IT systems, leading to widespread issues including delayed product restocking, unavailable online orders, and disrupted deliveries.

Customers across the UK noticed empty shelves in some stores, and the retailer was forced to pause online sales - impacting estimated daily revenue of £3.8 million, and halt certain food deliveries via its partner Ocado. While some services like contactless payments and browsing have resumed, others remain affected, such as gift card usage and full stock replenishment.

The breach has hit M&S at a time when it was enjoying strong momentum, with grocery sales up 14.4% over the past quarter. However, the market responded swiftly to the uncertainty, knocking more than £600 million off its stock value.

Co-op: IT Systems Shut Down After Hack Attempt

In a worrying follow-up incident, the Co-op also reported a hack attempt, prompting a shutdown of parts of its IT infrastructure. While the company acted quickly to prevent unauthorised access, certain systems such as virtual desktops and stock updates were taken offline as a precaution.

Despite the disruption, Co-op emphasised that its stores remain open and deliveries are still running. There is currently no evidence of customer data being compromised.

Love on Hold: M&S Wedding Cake Orders Caught in the Crossfire

Among those most affected by the M&S cyberattack are couples preparing for upcoming weddings. The retailer’s much-loved “naked wedding cake” - a rustic-style sponge cake that has become a staple at British weddings - has faced widespread cancellations and delays.

Brides and grooms have taken to social media expressing concern and frustration, with many scrambling for last-minute alternatives. The cake, known for its elegance and affordability, was often ordered months in advance. Now, M&S has confirmed that while it is working hard to fulfil pending orders, some cake bookings may not be honoured due to system disruptions and supply chain constraints.

This has added unexpected stress for many couples already navigating the complexities of wedding planning, raising broader concerns about consumer reliance on big-name retailers for milestone events.

Industry-Wide Concerns

These back-to-back cyber incidents reveal a growing vulnerability within the UK retail sector. From supply chain hiccups to disrupted consumer services, the attacks have underscored the urgent need for more robust digital defences. As the threat landscape evolves, both customers and companies alike are left wondering: who's next?

Want to find out how Vertex can help you?

Get in touch with one of our consultants today!
Get In Touch

Latest Updates

View All