Marks & Spencer (M&S), a major UK retailer, is grappling with the aftermath of a cyber attack that has disrupted its operations significantly. One of its largest suppliers, Greencore, has had to revert to old-fashioned methods, using pen and paper for processing orders. This shift comes as part of an effort to maintain the supply chain amid the ongoing disruptions. Greencore’s CEO, Dalton Philips, explained that the company has increased deliveries by 20% to ensure ample food supply for the bank holiday weekend, with additional shifts at its dedicated M&S factory in Northampton.
The cyber attack has crippled M&S’s ability to offer online orders for clothing and homewares for over a week, leading to empty shelves in some stores due to disrupted food deliveries. Employees have expressed concerns over payroll issues as they are unable to clock in and out of work or access staff applications. George, an M&S worker in Wales, described the situation as a "nightmare," with unclear instructions and concerns over payroll accuracy.
Despite these challenges, M&S has assured staff they will be paid for all contracted hours. Jeannette Pellen, a retired M&S customer assistant, noted the lack of communication from managers and HR due to the attack. Greencore is actively supporting M&S by deploying staff to key stores in London and sending more lorries to ensure product availability, even exceeding Christmas levels of supply.
While M&S has not disclosed specifics about the cyber attack, it acknowledged that some systems have been temporarily taken offline, resulting in limited product availability in certain stores. Industry experts suggest that M&S is prioritizing the availability of best-selling items and relying on historical data and supplier insights to navigate the crisis. Ged Futter, a former Asda buyer, believes M&S will overcome these challenges, as retailers are adept at finding solutions in crises.
The longer the disruption persists, the greater the risk to M&S’s reputation and customer loyalty. While M&S has been commended for its communication with customers, the lack of transparency regarding the attack’s nature and progression may eventually become untenable. The Business and Trade Select Committee’s chair, Liam Byrne, has sought reassurances from M&S’s chief executive, Stuart Machin, emphasizing the importance of understanding the incident.
In a similar vein, a former executive familiar with handling data breaches suggested a strategic communication approach: remain silent until all facts are known, then communicate transparently before going silent again. This underscores the delicate balance M&S must maintain in managing both external communications and internal operations during this challenging period. As the situation unfolds, the retail giant faces the dual task of resolving logistical challenges and maintaining customer trust in the face of adversity.