{"id":438174,"date":"2025-05-16T14:23:00","date_gmt":"2025-05-16T13:23:00","guid":{"rendered":"https:\/\/www.drapersonline.com\/?p=438174"},"modified":"2025-05-20T15:33:04","modified_gmt":"2025-05-20T14:33:04","slug":"ms-cyber-attack-lessons-on-crisis-management","status":"publish","type":"post","link":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management","title":{"rendered":"M&#038;S cyber-attack: lessons on crisis management"},"content":{"rendered":"<p>Today (16 May) Marks &amp; Spencer entered the fourth week of its website outage after a cyber-incident over Easter weekend left its online orders suspended and <a href=\"https:\/\/www.drapersonline.com\/news\/ms-tells-customers-some-data-taken-in-cyber-attack\">customer data stolen.<\/a><\/p>\n<p>Following the attack, customers have shown support by pledging to continue to shop at M&amp;S and praising how its in-store staff handled the technical issues. CEO Stuart Machin led the task of informing the public with personal social media updates, which have been received positively.<\/p>\n<p>However, as the fallout continues, M&amp;S is facing increased scrutiny from shoppers and investors. The retailer&#8217;s share price has fallen 14% since it disclosed the attack on 22 April, to 352p per share as of today.<\/p>\n<div id=\"attachment_425018\" class=\"wp-caption aligncenter\" style=\"max-width: 1034px;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-425018 size-large\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-1024x683.webp\" alt=\"M&amp;S chief executive Stuart Machin\" width=\"1024\" height=\"683\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-1024x683.webp 1024w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-300x200.webp 300w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-768x512.webp 768w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-1000x666.webp 1000w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-748x499.webp 748w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-492x328.webp 492w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-391x260.webp 391w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-185x123.webp 185w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-230x153.webp 230w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2024\/11\/06110118\/Stuart-Machin-hi-res-150x100.webp 150w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><p class=\"wp-caption-text\">Stuart Machin: M&amp;S is &#8220;working around the clock&#8221; to get things back to normal<\/p>\n\t<p class=\"inline_image_source\" style=\"max-width: 1034px;\"><p class=\"empty_inline_source\"><\/p><\/p><\/div>\n<p>Drapers hears from crisis management specialists on how they think M&amp;S dealt with the incident, including the customer data breach, and what lessons others can learn from its crisis communication.<\/p>\n<p>M&amp;S will release its full-year results next Wednesday and is expected to update the market on the consequences of the cyber-attack.<\/p>\n<h3>How did M&amp;S respond?<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-438242 alignright\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133639\/Kate-Hartley-200x300.webp\" alt=\"\" width=\"200\" height=\"300\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133639\/Kate-Hartley-200x300.webp 200w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133639\/Kate-Hartley-153x230.webp 153w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133639\/Kate-Hartley-100x150.webp 100w\" sizes=\"(max-width: 200px) 100vw, 200px\" \/><\/p>\n<p><strong>Kate Hartley, co-founder of Polpeo and author of <em>Communicate in a Crisis<\/em><\/strong>: [As an M&amp;S customer,] I think they handled it really well. They got in touch very quickly and were proactive and open about what had happened, using language you could understand. Very often in a crisis companies hide behind corporate jargon, and M&amp;S avoided this.<\/p>\n<p>The key to good crisis communication is regular, open communication that shows genuine empathy. M&amp;S has done this well. A personal statement from CEO Stuart Machin gave a clear apology and promised to keep customers informed. That shows strong leadership and sends a clear message about how seriously the company takes customer care.<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-438239 alignleft\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133541\/Stephen-Waddington-300x200.webp\" alt=\"\" width=\"300\" height=\"200\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133541\/Stephen-Waddington-300x200.webp 300w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133541\/Stephen-Waddington-185x123.webp 185w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133541\/Stephen-Waddington-230x153.webp 230w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133541\/Stephen-Waddington-150x100.webp 150w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p><strong>Stephen Waddington, professional advisor at Wadds Inc and corporate communications researcher at Leeds Business School:<\/strong>\u00a0M&amp;S initially acted quickly and decisively, with CEO Stuart Machin leading the response. The management team trained store staff across the UK on the nature of the situation. The business was clearly prepared from a corporate communications perspective.<\/p>\n<p>M&amp;S\u2019s communication has been strong in many areas but uneven in execution. The delayed disclosure of customer data loss undermined this good work. Effective crisis communication requires both promptness and transparency.<\/p>\n<p><strong><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-438241 alignright\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133619\/Tali-Robinson-300x200.webp\" alt=\"\" width=\"300\" height=\"200\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133619\/Tali-Robinson-300x200.webp 300w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133619\/Tali-Robinson-185x123.webp 185w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133619\/Tali-Robinson-230x153.webp 230w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133619\/Tali-Robinson-150x100.webp 150w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>Tali Robinson, managing director of crisis and special situations at SEC Newgate<\/strong>: M&amp;S&#8217;s recent cyber attack is turning into a tale of two halves when it comes to public perception and impact on reputation. The FTSE 100 retailer was initially praised for its response: a crisis team who had war gamed and planned extensively for this, an immediate, transparent video statement from the CEO, retail staff working tirelessly to keep stores open and provide workarounds for online customers.<\/p>\n<p>But three weeks on and the British public\u2019s initial sympathy for retail\u2019s latest cybercrime victim has all but dried up. Criticism is growing as quickly as M&amp;S\u2019s share price is falling: that their updates are too brief, too vague and too infrequent; that reassurances about &#8220;robust business continuity plans&#8221; are falling flat.<\/p>\n<h3>How did M&amp;S communicate the customer data breach?<\/h3>\n<p><strong>Hayley Goff, CEO of Whiteoaks International<\/strong>: The delay in confirming that personal data had been accessed has raised valid concerns. Customers are only now, weeks after the initial breach, learning the full extent of what happened and that is leading to speculation about the implications for customers.<\/p>\n<p>It\u2019s that lag in transparency that risks damaging the trust M&amp;S has worked hard to protect. Reports of internal confusion also suggest a disconnect between external communications, which seemed rehearsed and polished, and operational readiness.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-438240 size-medium alignright\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133602\/PMC-Clearly-PR-200x300.webp\" alt=\"\" width=\"200\" height=\"300\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133602\/PMC-Clearly-PR-200x300.webp 200w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133602\/PMC-Clearly-PR-153x230.webp 153w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133602\/PMC-Clearly-PR-100x150.webp 100w\" sizes=\"(max-width: 200px) 100vw, 200px\" \/><\/p>\n<p><strong>Paul MacKenzie-Cummins, founder of reputation management agency Clearly PR:<\/strong> CEO Stuart Machin revealed that customers&#8217; personal data has been taken by hackers, adding that there is &#8220;no need for customers to take any action.&#8221; If M&amp;S\u2019s handling of the crisis from a comms perspective was poor, such a revelation could be very damaging and would see the company fighting hard to regain customer trust and respect for years to come. That\u2019s not the case here.<\/p>\n<p>Because their comms has been so good, Machin was able to go public in the knowledge that they had built up so much goodwill since the crisis started that M&amp;S will likely be applauded rather than slammed for being so transparent and honest.<\/p>\n<p><strong>Kate Hartley<\/strong>: They\u2019ve told customers their personal data has been stolen, and explained the implications of that. When you log in, you\u2019re prompted to change your password, and there\u2019s a clear message on the website about the attack. People often feel out of control during a crisis, particularly a cyber-attack, so giving them something they can do to take back a bit of control is really important, even if it\u2019s as simple as changing a password.<\/p>\n<p>The real test, though, comes now. How quickly will they get systems up and running, how will they deal with the inevitable follow up scams to customers from criminals pretending to be M&amp;S, and can they reassure customers that M&amp;S is a safe place to shop?<\/p>\n<div class=\"factfile\">\n<p><strong>Read more:<\/strong><\/p>\n<p><a href=\"https:\/\/www.drapersonline.com\/topics\/digital-and-tech\/what-are-retailers-investing-in-now-to-bolster-cyber-security\">What are retailers investing in now to bolster cyber-security?<\/a><\/p>\n<p><a href=\"https:\/\/www.drapersonline.com\/insight\/analysis\/ms-cyber-attack-the-lessons-for-fashion-retailers\">M&amp;S cyber-attack: the lessons for fashion retailers<\/a><\/p>\n<\/div>\n<h3>What can others learn from this?<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-438243 alignleft\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133647\/Hayley-Goff-headshot-300x300.webp\" alt=\"\" width=\"300\" height=\"300\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133647\/Hayley-Goff-headshot-300x300.webp 300w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133647\/Hayley-Goff-headshot-150x150.webp 150w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133647\/Hayley-Goff-headshot-70x70.webp 70w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133647\/Hayley-Goff-headshot-230x230.webp 230w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p><strong>Hayley Goff<\/strong>: There are clear lessons here for other retailers. Firstly, you can\u2019t prevent every crisis, but you can prepare your response to one. Importantly, that preparation must include both comms and operational plans, as even the most polished comms can\u2019t mask a disorganised internal response.<\/p>\n<p>Secondly, communication should be prompt, clear and compassionate. Customers want honesty and reassurance, not spin. Retailers should also understand that it\u2019s better to share partial but accurate information than to wait for a perfect, all-encompassing update. Early transparency builds credibility at a time when reputations are on the line.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Stephen Waddington<\/strong>: The M&amp;S response offers three insights for retailers: designate a single senior spokesperson who can maintain credibility throughout the crisis; prepare pre-approved messaging templates for different breach scenarios to avoid delays in critical disclosures; invest in communications infrastructure that can operate independently from compromised systems.<\/p>\n<p><strong>Tali Robinson:\u00a0<\/strong>For retailers, the lessons are clear: downplaying the impact is a mistake; customers and markets will spot it. We advise clients to communicate early, often, and with substance. Keeping internal teams informed is also crucial, as chaos behind the scenes inevitably leaks out.<\/p>\n<p>Businesses seem to be waking up to the fact that cyber-attacks need to be planned for in \u2018when\u2019 &#8211; not \u2018if\u2019 &#8211; terms, and that cyber resilience is not an IT or even a PR concern. It\u2019s now a board-level priority.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-438238 size-medium alignright\" src=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133519\/PPA_TriciaFoxVolpa-39-300x200.webp\" alt=\"\" width=\"300\" height=\"200\" srcset=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133519\/PPA_TriciaFoxVolpa-39-300x200.webp 300w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133519\/PPA_TriciaFoxVolpa-39-185x123.webp 185w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133519\/PPA_TriciaFoxVolpa-39-230x153.webp 230w, https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/05\/16133519\/PPA_TriciaFoxVolpa-39-150x100.webp 150w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p><strong>Tricia Fox, founder of marketing agency Cunningly Good Group<\/strong>: You should both expect to communicate (don&#8217;t hide), and be truthful (if you don&#8217;t know, say so). The public and your customers will forgive you for many things in a crisis situation, because they understand the world is complex, but if you lie to them, they will remember and your reputation may never recover.<\/p>\n<p>Preparing for a crisis is often overlooked but a well thought-out plan, pre-drafted statements, clear access maps for all media channels you own and table top scenarios will save you crucial decision making and response times when the proverbial hits the fan.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today (16 May) Marks &amp; Spencer entered the fourth week of its website outage after a cyber-incident over Easter weekend left its online orders suspended and customer data stolen. Following the attack, customers have shown support by pledging to continue to shop at M&amp;S and praising how its in-store staff handled the technical issues. CEO &#8230;<\/p>\n","protected":false},"author":100233,"featured_media":434951,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"ep_exclude_from_search":false,"footnotes":""},"categories":[973,1215,962],"tags":[84369,5026,3191,2176],"class_list":["post-438174","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-companies","category-marks-and-spencer","category-news","tag-cyber-attack","tag-cyber-security","tag-ms","tag-marks-spencer","editorial-marks-spencer","editorial-retailers"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.7 (Yoast SEO v26.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>M&amp;S cyber-attack: lessons on crisis management<\/title>\n<meta name=\"description\" content=\"As M&amp;S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"M&amp;S cyber-attack: lessons on crisis management\" \/>\n<meta property=\"og:description\" content=\"As M&amp;S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\" \/>\n<meta property=\"og:site_name\" content=\"Drapers\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-16T13:23:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-20T14:33:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-560x315.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"560\" \/>\n\t<meta property=\"og:image:height\" content=\"315\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Zoe Hu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zoe Hu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\"},\"author\":{\"name\":\"Zoe Hu\",\"@id\":\"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34\"},\"headline\":\"M&#038;S cyber-attack: lessons on crisis management\",\"datePublished\":\"2025-05-16T13:23:00+00:00\",\"dateModified\":\"2025-05-20T14:33:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\"},\"wordCount\":1263,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp\",\"keywords\":[\"cyber attack\",\"cyber security\",\"M&amp;S\",\"Marks &amp; Spencer\"],\"articleSection\":[\"Companies\",\"Marks and Spencer\",\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\",\"url\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\",\"name\":\"M&S cyber-attack: lessons on crisis management\",\"isPartOf\":{\"@id\":\"https:\/\/www.drapersonline.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp\",\"datePublished\":\"2025-05-16T13:23:00+00:00\",\"dateModified\":\"2025-05-20T14:33:04+00:00\",\"author\":{\"@id\":\"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34\"},\"description\":\"As M&S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage\",\"url\":\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp\",\"contentUrl\":\"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp\",\"width\":2560,\"height\":1698,\"caption\":\"M&S store - Marks & Spencer store\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.drapersonline.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"M&#038;S cyber-attack: lessons on crisis management\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.drapersonline.com\/#website\",\"url\":\"https:\/\/www.drapersonline.com\/\",\"name\":\"Drapers\",\"description\":\"Fashion retail industry news, trends and analysis\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.drapersonline.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34\",\"name\":\"Zoe Hu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.drapersonline.com\/#\/schema\/person\/image\/401e1471bc4f78a3af5928829807b229\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ccf2598d2abdf6f6832358f21e3a3f7636eb99b3805a74a2893c41d7bb8b22d7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ccf2598d2abdf6f6832358f21e3a3f7636eb99b3805a74a2893c41d7bb8b22d7?s=96&d=mm&r=g\",\"caption\":\"Zoe Hu\"},\"description\":\"As senior news reporter at Drapers, Zoe has been covering all things fashion retail since August 2022, from breaking industry exclusives to following up important news in the sector. Her specialised areas include retail property, corporate finance, fashion's supply chain and menswear. Email her at zoe.hu@emap.com with any news tips or feedback.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/zoe-hu-562bba196\/\"],\"url\":\"https:\/\/www.drapersonline.com\/author\/zoe-hu\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"M&S cyber-attack: lessons on crisis management","description":"As M&S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management","og_locale":"en_US","og_type":"article","og_title":"M&S cyber-attack: lessons on crisis management","og_description":"As M&S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0","og_url":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management","og_site_name":"Drapers","article_published_time":"2025-05-16T13:23:00+00:00","article_modified_time":"2025-05-20T14:33:04+00:00","og_image":[{"width":560,"height":315,"url":"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-560x315.jpg","type":"image\/jpeg"}],"author":"Zoe Hu","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zoe Hu","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#article","isPartOf":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management"},"author":{"name":"Zoe Hu","@id":"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34"},"headline":"M&#038;S cyber-attack: lessons on crisis management","datePublished":"2025-05-16T13:23:00+00:00","dateModified":"2025-05-20T14:33:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management"},"wordCount":1263,"commentCount":0,"image":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage"},"thumbnailUrl":"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp","keywords":["cyber attack","cyber security","M&amp;S","Marks &amp; Spencer"],"articleSection":["Companies","Marks and Spencer","News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management","url":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management","name":"M&S cyber-attack: lessons on crisis management","isPartOf":{"@id":"https:\/\/www.drapersonline.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage"},"image":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage"},"thumbnailUrl":"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp","datePublished":"2025-05-16T13:23:00+00:00","dateModified":"2025-05-20T14:33:04+00:00","author":{"@id":"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34"},"description":"As M&S continues to grapple with a cyber-attack which left its online orders suspended and customer data stolen, Drapers speaks with crisis management experts on how the retailer has handled the situation and what other businesses can learn from its approach.\u00a0","breadcrumb":{"@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#primaryimage","url":"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp","contentUrl":"https:\/\/cdn.rt.emap.com\/wp-content\/uploads\/sites\/2\/2025\/03\/31133659\/MS-store-2-scaled.webp","width":2560,"height":1698,"caption":"M&S store - Marks & Spencer store"},{"@type":"BreadcrumbList","@id":"https:\/\/www.drapersonline.com\/news\/ms-cyber-attack-lessons-on-crisis-management#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.drapersonline.com\/"},{"@type":"ListItem","position":2,"name":"M&#038;S cyber-attack: lessons on crisis management"}]},{"@type":"WebSite","@id":"https:\/\/www.drapersonline.com\/#website","url":"https:\/\/www.drapersonline.com\/","name":"Drapers","description":"Fashion retail industry news, trends and analysis","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.drapersonline.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.drapersonline.com\/#\/schema\/person\/f070417af75e9c387eaa06d721e4cd34","name":"Zoe Hu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.drapersonline.com\/#\/schema\/person\/image\/401e1471bc4f78a3af5928829807b229","url":"https:\/\/secure.gravatar.com\/avatar\/ccf2598d2abdf6f6832358f21e3a3f7636eb99b3805a74a2893c41d7bb8b22d7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ccf2598d2abdf6f6832358f21e3a3f7636eb99b3805a74a2893c41d7bb8b22d7?s=96&d=mm&r=g","caption":"Zoe Hu"},"description":"As senior news reporter at Drapers, Zoe has been covering all things fashion retail since August 2022, from breaking industry exclusives to following up important news in the sector. Her specialised areas include retail property, corporate finance, fashion's supply chain and menswear. Email her at zoe.hu@emap.com with any news tips or feedback.","sameAs":["https:\/\/www.linkedin.com\/in\/zoe-hu-562bba196\/"],"url":"https:\/\/www.drapersonline.com\/author\/zoe-hu"}]}},"_links":{"self":[{"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/posts\/438174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/users\/100233"}],"replies":[{"embeddable":true,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/comments?post=438174"}],"version-history":[{"count":38,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/posts\/438174\/revisions"}],"predecessor-version":[{"id":438466,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/posts\/438174\/revisions\/438466"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/media\/434951"}],"wp:attachment":[{"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/media?parent=438174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/categories?post=438174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.drapersonline.com\/wp-json\/wp\/v2\/tags?post=438174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}