Case study: how a single phone call cost Marks & Spencer £300m

2026-06-22T14:45:00

A social engineering attack through a third-party helpdesk forced retailer Marks & Spencer into an online order shutdown that decimated profits. The incident provoked serious questions about vulnerabilities in detection, response planning, and outsourced risk.

For continued access to free content, you need to register. (If you’re already registered, please sign in here.)

REGISTER NOW FOR FREE

We’re glad you’ve chosen StrategicRISK as your essential source for risk management insight and hope you’ve been enjoying our content.

Gain access to our full archive of flagship quarterly digital issues, packed with strategic insights, market commentary, and opinion from leading risk management professionals. Registering is quick, easy, free, and will also have the additional benefits:

Uncover Critical Insights: Dive deep with exclusive annual reports, fuelled by expert analysis on topics like climate change and industry trends.
Stay Ahead with Expert Analysis: Award-winning coverage and analysis, delivered directly to your inbox through our newsletters.
Curate Your Knowledge: Build a personalised library of essential articles and reports for quick reference.
Access Premium Content: Unlock our full archive of in-depth articles, case studies, and expert opinions.

We also offer a dedicated print subscription.
LEARN MORE