{"id":98586,"date":"2025-04-30T16:35:13","date_gmt":"2025-04-30T16:35:13","guid":{"rendered":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve"},"modified":"2025-04-30T16:35:13","modified_gmt":"2025-04-30T16:35:13","slug":"why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","status":"publish","type":"post","link":"https:\/\/www.africa-press.net\/ghana\/all-news\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","title":{"rendered":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?"},"content":{"rendered":"

Africa-Press – Ghana. <\/strong><\/span>It’s now been more than a week of chaos for Marks and Spencer (M&S), one of the UK’s biggest brands, following what – it is now obvious – is a significant cyber attack.<\/b><\/p>\n

It has cost it millions of pounds in lost sales and a lower share price.<\/p>\n

M&S has not said what or who knocked out its online ordering systems, paused deliveries and left empty shelves in stores.<\/p>\n

The BBC has been told by security experts that ransomware called DragonForce was used in the attack.<\/p>\n

Ciaran Martin, the founding Chief Executive of the National Cyber Security Centre, said it had “serious” consequences for M&S.<\/p>\n

“This is a pretty bad episode of ransomware,” he said.<\/p>\n

“It is a highly disruptive event and a very difficult one for them to deal with.”<\/p>\n

Mr Martin, who is now a professor at Oxford University, said M&S does not have many choices, whether it chooses to talk to the gang responsible for the attack or not.<\/p>\n

“Even organisations that pay a ransom – because this is a bunch of criminals who can’t be trusted – sometimes find it doesn’t work,” he said.<\/p>\n

“In organisations that don’t pay, you have to try to restore things and activate backups, and that’s very complicated.”<\/p>\n

Many non-cyber related technical glitches are relatively quick fixes. An outage caused by a faulty software or server update, or even user error, can often be resolved in a matter of hours.<\/p>\n

But trying to find and stop malware sweeping through systems and causing havoc on the scale of those operated by a large nationwide retailer like M&S, is not a quick job says Professor Alan Woodward, a cybersecurity expert from Surrey University.<\/p>\n

“Everything from knowing what has been sold, hence what needs replenishing, to taking card payments is very dependent on complex systems… it will take significant time and expertise to analyse and ensure they have expelled the hacker,” he said.<\/p>\n

Lisa Forte, partner at cyber security firm Red Goat, agrees.<\/p>\n

“They are handling the disruption in a mature way but to expect any company to get anything back online in a week is never going to happen,” she says.<\/p>\n

“I don’t know one organisation that could do it.”<\/p>\n

‘A digital bomb’A lot is also riding on the nature of the threat. The longer a cyber incident goes on, the more likely it is to be ransomware, say multiple cybersecurity experts.<\/p>\n

“I would suggest there is a high level of confidence this is a ransomware style event,” says Dan Card, cyber expert at BCS, the chartered institute for IT.<\/p>\n

“I describe these as like a digital bomb has gone off. So recovering from them is often both technically and logistically challenging… the victim organisation is likely going to be working around the clock to respond and recover.”<\/p>\n

Ransomware is a particularly nasty strain of malware, in which the owner of a computer or network of computers is locked out, their data scrambled, and the attackers demand a fee, usually in cryptocurrency, to restore it.<\/p>\n

Official advice is not to pay. You are, after all, putting your trust in criminals to be true to their word.<\/p>\n

But it is often impossible to restore compromised services without the hackers’ key \u2013 meaning the only way around it is to either use back-ups or install new systems and start again.<\/p>\n

M&S will not comment, and no attacker has yet gone public with any demands \u2013 although this doesn’t always happen, it is often a way for cyber criminals to pile more pressure onto their victims.<\/p>\n

DragonForce, the cyber criminal gang we were told on Tuesday was likely to be behind the attack, allow other hackers to use their malicious software for attacks providing they get a cut.<\/p>\n

As to who those hackers might be: fingers are pointing at a rather fluid network of individuals called Scattered Spider (it also has other aliases).<\/p>\n

It was behind the attack on the MGM Las Vegas hotels in 2023.<\/p>\n

The website Bleeping Computer cites “multiple sources” suggesting they are responsible and says some of them are teenagers, external.<\/p>\n

Rik Ferguson, special advisor to Europol’s European Cyber Crime Centre, says the sources of speculation about the group’s involvement seem credible but adds that he has seen no conclusive evidence so far.<\/p>\n

I asked him whether M&S customers should be concerned about their personal information: the firm itself currently says no action is required.<\/p>\n

“Only M&S are able to tell us whether customers should be worried about their personal data,” he said.<\/p>\n

“In the absence of certainty, it would certainly be advisable for M&S customers, particularly those who may have reused their M&S account credentials on other web services, to begin changing those passwords elsewhere.”<\/p>\n

For More News And Analysis About Ghana<\/span> Follow Africa-Press<\/span><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Africa-Press – Ghana. It’s now been more than a week of chaos for Marks and Spencer (M&S), one of the UK’s biggest brands, following what – it is now obvious – is a significant cyber attack. It has cost it millions of pounds in lost sales and a lower share price. M&S has not said […]<\/p>\n","protected":false},"author":84,"featured_media":98585,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,9],"tags":[429],"class_list":["post-98586","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-all-news","category-miscellaneous","tag-ghana"],"yoast_head":"\nWhy is the M&S Cyber Attack Chaos Taking so Long to Resolve? - Ghana<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?\" \/>\n<meta property=\"og:description\" content=\"Africa-Press – Ghana. It’s now been more than a week of chaos for Marks and Spencer (M&S), one of the UK’s biggest brands, following what – it is now obvious – is a significant cyber attack. It has cost it millions of pounds in lost sales and a lower share price. M&S has not said […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\" \/>\n<meta property=\"og:site_name\" content=\"Ghana\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AfricaPressTunisiaa\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-30T16:35:13+00:00\" \/>\n<meta name=\"author\" content=\"cfeditoren\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"cfeditoren\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\"},\"author\":{\"name\":\"cfeditoren\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb\"},\"headline\":\"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?\",\"datePublished\":\"2025-04-30T16:35:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\"},\"wordCount\":838,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg\",\"keywords\":[\"ghana\"],\"articleSection\":[\"all news\",\"miscellaneous\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\",\"url\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\",\"name\":\"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve? - Ghana\",\"isPartOf\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg\",\"datePublished\":\"2025-04-30T16:35:13+00:00\",\"author\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage\",\"url\":\"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg\",\"contentUrl\":\"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg\",\"width\":976,\"height\":549,\"caption\":\"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.africa-press.net\/ghana\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#website\",\"url\":\"https:\/\/www.africa-press.net\/ghana\/\",\"name\":\"Ghana\",\"description\":\"Just another Africa News Agency Sites site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.africa-press.net\/ghana\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb\",\"name\":\"cfeditoren\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7417380fa9e23b5c57fdbfdaf3fdf92ee478f759a084addda5faa3732853e74a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7417380fa9e23b5c57fdbfdaf3fdf92ee478f759a084addda5faa3732853e74a?s=96&d=mm&r=g\",\"caption\":\"cfeditoren\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve? - Ghana","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","og_locale":"en_US","og_type":"article","og_title":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?","og_description":"Africa-Press – Ghana. It’s now been more than a week of chaos for Marks and Spencer (M&S), one of the UK’s biggest brands, following what – it is now obvious – is a significant cyber attack. It has cost it millions of pounds in lost sales and a lower share price. M&S has not said […]","og_url":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","og_site_name":"Ghana","article_publisher":"https:\/\/www.facebook.com\/AfricaPressTunisiaa","article_published_time":"2025-04-30T16:35:13+00:00","author":"cfeditoren","twitter_card":"summary_large_image","twitter_misc":{"Written by":"cfeditoren","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#article","isPartOf":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve"},"author":{"name":"cfeditoren","@id":"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb"},"headline":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?","datePublished":"2025-04-30T16:35:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve"},"wordCount":838,"commentCount":0,"image":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage"},"thumbnailUrl":"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg","keywords":["ghana"],"articleSection":["all news","miscellaneous"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","url":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve","name":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve? - Ghana","isPartOf":{"@id":"https:\/\/www.africa-press.net\/ghana\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage"},"image":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage"},"thumbnailUrl":"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg","datePublished":"2025-04-30T16:35:13+00:00","author":{"@id":"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb"},"breadcrumb":{"@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#primaryimage","url":"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg","contentUrl":"https:\/\/static.africa-press.net\/ghana\/sites\/18\/2025\/04\/sm_1746022140.449542.jpg","width":976,"height":549,"caption":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?"},{"@type":"BreadcrumbList","@id":"https:\/\/www.africa-press.net\/ghana\/uncategorized\/why-is-the-ms-cyber-attack-chaos-taking-so-long-to-resolve#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.africa-press.net\/ghana\/"},{"@type":"ListItem","position":2,"name":"Why is the M&S Cyber Attack Chaos Taking so Long to Resolve?"}]},{"@type":"WebSite","@id":"https:\/\/www.africa-press.net\/ghana\/#website","url":"https:\/\/www.africa-press.net\/ghana\/","name":"Ghana","description":"Just another Africa News Agency Sites site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.africa-press.net\/ghana\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/068c7ab4e9634ae78ec5d54ec46598bb","name":"cfeditoren","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.africa-press.net\/ghana\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7417380fa9e23b5c57fdbfdaf3fdf92ee478f759a084addda5faa3732853e74a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7417380fa9e23b5c57fdbfdaf3fdf92ee478f759a084addda5faa3732853e74a?s=96&d=mm&r=g","caption":"cfeditoren"}}]}},"_links":{"self":[{"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/posts\/98586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/users\/84"}],"replies":[{"embeddable":true,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/comments?post=98586"}],"version-history":[{"count":0,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/posts\/98586\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/media\/98585"}],"wp:attachment":[{"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/media?parent=98586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/categories?post=98586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.africa-press.net\/ghana\/wp-json\/wp\/v2\/tags?post=98586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}