What the M&S, Co-op and JLR cyber attacks taught British business

On 17 April 2025, the Thursday before Easter, someone got through to the IT service desk that handled support for Marks & Spencer and talked their way into a password reset. M&S chairman Archie Norman later told MPs the caller had arrived with the right details for the person they were impersonating. Within days M&S had stopped taking online orders. Within a fortnight the Co-op was pulling its own systems…