The recent wave of cyber attacks targeting prominent retailers including Marks & Spencer, The Co-op, Harrods, and now Dior has sent shockwaves through the business community. These incidents are not isolated cases but rather reflect evolving threats that affect organisations regardless of size, sector, or security budget.
What makes these attacks particularly noteworthy is their sophistication and impact. M&S experienced significant operational disruption, with online orders suspended, stock management issues, and customer data compromise. The Co-op was forced to restrict staff remote access to systems, while Harrods had to take proactive measures by limiting internet access at their locations. Most recently, Dior discovered unauthorised access to their customer database in China on May 7, 2025, exposing personal information (financial data remains secure as far as we know).
Behind these attacks appears to be sophisticated threat actors. Security researchers have linked the M&S incident to a group known as Scattered Spider (also called Octo Tempest), with some reports suggesting connections to a ransomware operation called DragonForce. These criminal groups employ sophisticated social engineering techniques like phishing and impersonating IT help desk staff to gain initial access.
Why no business is safe (without being alarmist)
The fundamental truth these incidents reveal isn’t that cyber security is hopeless, but rather that traditional approaches are insufficient against today’s threats.
According to research cited by City AM, only four percent of UK firms are fully prepared to defend against complex cyber threats, and 83 percent face cyber security skills shortages.
What makes every business vulnerable are several key factors:
- Expanding digital footprints: As retailers and other businesses embrace e-commerce, mobile platforms, and omnichannel strategies, they naturally increase their attack surface. Every digital initiative that improves customer experience also creates potential entry points for attackers.
- Legacy infrastructure challenges: Many organisations operate on systems “bolted together over decades with minimal regard for resilience-by-design,” according to DECTA CEO Scott Dawson. This creates security silos and disjointed crisis response capabilities.
- Data value proposition: Retailers process billions of payments annually and hold vast repositories of identity and customer information. This data is immensely valuable to cyber criminals, making retail a prime target regardless of company size.
- Supply chain vulnerabilities: Modern business operations rely on complex networks of suppliers and technology partners. As demonstrated repeatedly, attackers often target the weakest link in this chain to compromise larger organisations.
Rather than viewing these incidents as cause for alarm, forward-thinking business leaders should see them as catalysts for improvement. Here are concrete steps organisations can take:
Assume breach mentality: Instead of believing complete protection is possible, adopt the mindset that compromise may happen despite best efforts. This drives investment in detection, response, and recovery capabilities.
Implement zero trust architecture: Move away from perimeter-based security to models where nothing is trusted by default. Verify everything, limit access privileges, and segment networks to contain potential breaches.
Prioritise resilience by design: When developing new systems or digital initiatives, build security considerations into the process from day one rather than bolting them on afterward.
Conduct regular testing: Implement penetration testing, tabletop exercises, and crisis simulations to identify weaknesses before attackers do and ensure teams know how to respond effectively.
Focus on human factors: Since social engineering remains a primary attack vector, invest in regular, engaging security awareness training that evolves with current threats.
Develop transparent communication plans: When incidents occur, having clear, pre-approved communication templates and procedures helps maintain stakeholder trust.
The recent attacks on M&S, The Co-op, Harrods, and Dior demonstrate that even well-resourced organisations face significant cybersecurity challenges. However, these incidents should inspire action rather than anxiety.
By acknowledging vulnerabilities, adopting a realistic view of the threats, and implementing pragmatic security measures, businesses of all sizes can significantly reduce their risk exposure while remaining operationally effective and customer-focused.
The goal isn’t to eliminate all risk, which is impossible,but to build organisations resilient enough to withstand inevitable attempts at compromise and recover quickly when incidents occur. This balanced approach represents the new standard for responsible business leadership.
