Tata Consultancy Services carries out internal probe into M&S hack, FT reports

Tata Consultancy Services (TCS) has launched an internal investigation to ascertain if it served as the entry point for a cyberattack on Marks and Spencer (M&S), according to an FT report. The probe, expected to conclude by month-end, addresses concerns that TCS's IT services, provided to M&S for over a decade, may have been compromised; M&S estimates the cyberattack disclosed in April will cost approximately 300 million pounds in lost operating profit and disrupt online services until July.

Analysis

Tata Consultancy Services (TCS.NS) is conducting an internal investigation into its potential role as a gateway for a significant cyberattack on Marks and Spencer (MKS.L), a long-standing client for over a decade, as reported by the Financial Times. This probe, anticipated to conclude by the end of May, follows M&S's disclosure in April of a cyberattack projected to cause approximately £300 million ($404.9 million) in lost operating profit and continued disruption to its online services, likely extending until July. The situation carries strongly negative sentiment for both M&S (sentiment score -0.85) due to the direct financial and operational impact, and for TCS (sentiment score -0.65) given the potential reputational damage and questions regarding its service integrity. While Reuters has not independently confirmed the FT report, and official comments from M&S and TCS were not immediately available to Reuters, the investigation itself underscores the critical cybersecurity risks inherent in third-party IT service provision and highlights the financial vulnerabilities for retail operations heavily reliant on digital platforms.

Key Decisions for Investors

• Investors in Marks and Spencer (MKS.L) should monitor the full extent of the £300 million operating profit impact and the timeline for restoration of online services, as these factors will directly affect near-term earnings and potentially consumer confidence.
• For Tata Consultancy Services (TCS.NS) stakeholders, the outcome of the internal probe is a key watchpoint; a finding of culpability could lead to financial liabilities, contract re-evaluations, and significant reputational harm, impacting future business.
• This incident serves as a reminder for investors across sectors to scrutinize companies' cybersecurity measures and their reliance on third-party vendors, as breaches can result in substantial financial and operational disruptions.