M&S' digital chief exits months after damaging hack

Marks & Spencer's chief digital and technology officer, Rachel Higham, is stepping down, months after a cyberattack was projected to cost the retailer approximately £300 million ($405 million) in lost operating profit for FY2025/26. Her departure, with operations director Sacha Berendji assuming digital and technology responsibilities, occurs as the company navigates the significant financial and operational impact of the recent hack.

Analysis

The departure of Marks & Spencer's Chief Digital and Technology Officer, Rachel Higham, introduces leadership instability in a critical function, occurring just months after a major cyberattack. This event is contextualized by the significant financial fallout from the breach, which M&S has forecast will result in a £300 million loss in operating profit for its 2025/26 fiscal year. While the company aims to mitigate half this impact via insurance and cost controls, a material financial headwind remains. The consolidation of digital and technology responsibilities under the Operations Director, Sacha Berendji, suggests a potential strain on executive bandwidth and raises questions about the strategic priority of technology leadership versus operational integration. This management change, set against a backdrop of severe operational disruption and financial damage, underscores ongoing governance and cybersecurity risks for the retailer.

Key Decisions for Investors

• Investors should revise forward-looking models for fiscal year 2025/26 to incorporate the projected £300 million hit to operating profit, while critically assessing the company's ability to halve this impact as planned.
• The departure of the chief technology officer post-crisis and the consolidation of her responsibilities signal potential governance weakness; investors should closely monitor for any further senior management turnover or signs of strain on the executive team.
• It is prudent to scrutinize any disclosures regarding enhanced cybersecurity investments and controls, as the incident highlights a material vulnerability that could lead to further financial and reputational damage.