Marks & Spencer was targeted personally in cyberattack - report

Marks & Spencer CEO Stuart Machin was personally targeted in a recent cyberattack by ransomware group DragonForce, who claim to have encrypted M&S servers and stolen data from millions of customers, according to a BBC report. The hackers, potentially linked to the Scattered Spider group also responsible for an attack on Co-op, taunted Machin via a hijacked employee account. M&S operations are reportedly impacted until at least July, and the company's shares are down 2.2% for the past week amid the news.

Analysis

Marks and Spencer Group PLC (LSE:MKS) is currently grappling with a significant cyberattack where CEO Stuart Machin was personally targeted by ransomware group DragonForce. The attackers, who claim potential affiliation with the 'Scattered Spider' group—also implicated in an ongoing cyberattack on UK grocer Co-op—assert they have encrypted M&S servers and are stealing data pertaining to millions of customers. This security breach is projected to disrupt M&S operations until at least July, contributing to a 2.2% decline in its share price over the past week, with shares trading at 363.7p as of this morning. The event has generated a strongly negative sentiment score of -0.65 (with an even more pronounced -0.8 for MKS specifically) and a market impact score of 0.65, reflecting significant investor concern. This crisis unfolds against the backdrop of the CEO, Stuart Machin, recently receiving a 39% pay increase to £7.1 million, a detail that may attract further scrutiny amid the operational challenges and data security concerns.

Key Decisions for Investors

• Investors should closely monitor disclosures from Marks & Spencer regarding the full extent of the data breach, the timeline for operational recovery, and the estimated financial impact from remediation, potential fines, and lost sales, as these factors will be critical to assessing the damage.
• The reported operational disruption until at least July suggests a tangible impact on near-term revenue and profitability; thus, current earnings forecasts for M&S may require downward revision.
• With M&S shares already down 2.2% and a per-ticker sentiment of -0.8, further negative pressure on the stock is possible as more information about the customer data theft and the effectiveness of the company's response becomes public.
• The timing of the CEO's £7.1 million remuneration, amidst a severe cyberattack impacting customers and operations, could escalate governance concerns and reputational damage, warranting attention from institutional investors focused on ESG and stewardship.