News

ICO addresses wave of cyber attacks hitting major UK retailers M&S, Co-op, and Harrods

The UK’s Information Commissioner’s Office (ICO) has released a statement confirming it is looking into a series of recent cyber attacks that have targeted several high-profile British retailers, including Marks and Spencer (M&S), the Co-op Group, and Harrods.

The disruptions began over the Easter weekend when M&S first reported issues. The impact on the retailer has persisted for more than a week, initially affecting contactless payment systems and click-and-collect order fulfilment.

Earlier this week, M&S escalated its response by temporarily halting all orders placed through its website and app to address the ongoing problem.

The Metropolitan Police has also launched an investigation into the specific attack targeting M&S.

The Co-op Group was similarly affected by an attempted cyber intrusion, prompting the company to shut down portions of its IT infrastructure as a defensive measure.

Despite this, its retail shops and funeral services continued to operate. As part of its response, Co-op instructed staff engaged in remote meetings to keep their cameras turned on and to diligently verify the identities of all participants.

Most recently, luxury department store Harrods confirmed on Thursday that it had become a target. Following an attempt to gain unauthorised access to its systems, the London-based retailer restricted internet access across its sites as a precautionary step.

In response to these events, the ICO has stepped in.

Stephen Bonner, Deputy Commissioner at the ICO, stated, “We can confirm we have received reports from Marks and Spencer plc and the Co-op Group. We are making enquiries with these organisations and working closely with the National Cyber Security Centre (NCSC).”

Acknowledging potential public anxiety, Mr. Bonner added, “We recognise that seeing cyber attacks in the news can be concerning, especially if you are a customer.”

He directed concerned individuals to the ICO website for guidance and support.

Mr. Bonner also offered practical advice for consumers, urging them to enhance their personal cyber security:

“Make sure your accounts are protected by a strong password and that you are not using the same password across multiple accounts.” He further recommended that customers “check regularly for updates from the organisation and following their advice if they confirm that your personal information has been impacted by a cyber attack.”

The investigations by the ICO, NCSC, and the Metropolitan Police are ongoing as the retailers work to fully restore and secure their systems.