M&S Shuts Down Online Orders Amid Ongoing Cyber Incident
Marks & Spencer has paused taking online orders as the British retailer continues to tackle an ongoing cyber incident.
In a note posted on social media on April 25, the company said it has made the decision to pause taking orders via the M&S.com website and app. It is unclear when these services will be restored.
This update comes three days after the retailer confirmed it was tackling a cyber incident.
While M&S did not share why these services have been paused, there are multiple reasons why such action could be taken as part of an incident response.
For instance, if backend services have been affected by the cyber incident, shutting down such services could be part of the restoration effort even if the website and app are not directly impacted.
Initially, the disruption was limited to the firm’s contactless in-store payments and click and collect services.
It appears that contactless payments have been restored at most stores but click and collect services are still disrupted. Gift cards and e-gift cards cannot currently be used in store or online. The latest message from M&S said that customers can still browse its product range online and that stores remain open. It is unknown if any data has been accessed by unauthorized actors during the incident.
Commenting on the development, William Wright, CEO of Closed Door Security, said “This latest update highlights that the incident is now having a material impact, with all online and app sales being paused.”
“This will create a huge inconvenience for customers and will also significantly impact M&S financially. Data shows that almost a quarter on the store’s sales happen online, so no matter how long this pause is put in place, it will hurt M&S financially,” he added.
The retailer reiterated that customers do not need to take any action in the face of this cyber incident.
Leading cyber experts have been involved in the response and M&S has informed the UK’s National Cybersecurity Center (NCSC) about the incident.
Image credit: David Michael Bellis / Shutterstock.com