M&S, Co-op Hit by Cyberattack: MPs Demand Answers
Summary
British retailers Marks & Spencer (M&S) and Co-op have become the latest victims in a wave of cyberattacks shaking the UK’s retail sector. A major data breach has reportedly affected both companies, raising alarms over the rampant vulnerability of even the most well-established brands. In response, Members of Parliament (MPs) are now pressing for immediate clarity, pushing both retailers to disclose details on the extent of the breach, data compromised, and how they intend to protect consumer information moving forward.
The specifics of the attack are still unfolding, but early reports suggest significant disruption and data leakage. M&S and Co-op have confirmed that they were impacted by a third-party supplier breach, which indicates that vulnerabilities may have originated outside their core systems. This brings fresh attention to the risks associated with supply chain cybersecurity.
MPs are not mincing their words, urging both firms to appear before Parliament or relevant committees to explain what went wrong and how they plan to mitigate future incidents. With the UK retail industry already strained due to inflation and growing cyber threats, the pressure is mounting for businesses to prove they can safeguard sensitive customer data.
In light of this attack, the Information Commissioner’s Office (ICO) is expected to investigate potential GDPR breaches. Both M&S and Co-op face the possibility of regulatory scrutiny and financial penalties if found to be non-compliant.
This incident once again underlines the urgent need for investment in cybersecurity infrastructure, transparency in breach handling, and meaningful collaboration between business and government.

