Liv McMahon & Joe Tidy
Technology newsman & cyber correspondent
Reuters
Marks and Spencer (M&S) customers person been telling nan BBC of their vexation arsenic disruption caused by nan cyber onslaught which has deed nan retailer continues into different trading week.
The incident - which it disclosed past Monday - has caused delayed parcels, paused online orders and suspended gift paper payments, and has seen nan retailer return down respective parts of its operations complete nan past fewer days.
It has yet to disclose nan quality of nan cyber onslaught aliases erstwhile it expects operations to return to normal. Some customers told nan BBC that M&S' connection complete affected orders has been "disappointing".
Analysts pass nan incident may impact nan estimation of nan retailer among its customers.
Dan Coatsworth, finance expert astatine AJ Bell, said M&S's occurrence was "built connected trust" - and this was thing customers whitethorn mobility aft it suspended online orders.
"The longer it takes to tie a statement nether nan cyber incident, nan greater nan consequence to Marks & Spencer's reputation," he told nan BBC.
"Shoppers want to cognize that their individual and financial specifications are safe erstwhile buying equipment online and Marks & Spencer failing to springiness nan all-clear implies that thing is very incorrect astatine its end."
Customer impact
Customers person described problems astatine tills, self-checkout and online orders successful messages sent to BBC News.
Others opportunity they person had to cancel orders for apparel which they were expecting to cod earlier going connected holiday, aliases person been incapable to return equipment they had antecedently bought.
But immoderate person expressed sympathy for nan unit astatine nan stores, who they opportunity person been connected nan receiving extremity of maltreatment from angry customers, aliases having to woody pinch shopping abandoned astatine nan tills erstwhile customers were incapable to salary erstwhile contactless payments were down.
Gift cards and vouchers are still not working, according to a number of customers.
For some, nan issues person besides impacted deliveries of gifts specified arsenic flowers.
Linda Sonntag, who lives successful Norwich, told nan BBC she was near "disappointed" aft a flower transportation arranged for a friend ne'er arrived.
While she had been refunded for a abstracted clothing order, connected Monday she said she was still awaiting a refund and email pinch accusation astir her order.
"In nan meantime I've had to bid flowers from location else," she said.
"I don't blasted them, they've had a cyber attack," Ms Sonntag added.
"But I don't deliberation their cognition towards their customers is very helpful."
Dawn Cunnington of Exeter, agreed nan institution was not to blame, but said she had nary connection from M&S astir her ain flower bid not being fulfilled.
She had ordered flowers connected Wednesday, connected behalf of her 91-year-old mother, for her mother's friend, who was celebrating their 90th birthday.
"I'd had thing from them until I phoned up," she told nan BBC.
Ms Cunnington said she received a refund and a £10 apology voucher aft calling M&S to find retired what happened to nan flowers, but was "a spot cross" they had allowed her to spot nan bid successful nan first place, fixed it was alert of cyber incident.
'Cat and mouse'
M&S remains silent connected really nan cyber onslaught unfolded, nan quality of nan onslaught and really specifically it has been affected by it - leaving cyber information experts to estimate arsenic to what mightiness person happened.
It is known it has hired outer cyber information experts, who are apt to beryllium a squad of Incident Response specialists who will beryllium moving astir nan timepiece either astatine nan office of nan institution aliases remotely.
Their first privilege is apt to beryllium find retired wherever nan hackers are successful nan IT strategy and footwear them out.
Switching disconnected machine servers utilized successful their online ordering, costs aliases logistics systems mightiness connote that information teams person isolated that information arsenic a measurement nan hackers gained entry.
They mightiness besides person taken these offline to extremity nan hackers from spreading their malicious package into those antecedently unaffected areas.
It mightiness besides beryllium nan lawsuit that nan institution is taking each non-business captious services offline to thief woody pinch nan hack.
"In situations for illustration this, in-store services are typically prioritised for recovery, which tin mean online operations return somewhat longer to restore," said Sam Kirkman, a head astatine cyber-security patient NetSPI.
He told nan BBC that while M&S taking steps for illustration pausing services whitethorn make nan incident look "even much superior from nan outside," they would let unit to incorporate immoderate imaginable threats and statesman betterment safely.
Shares and sales
Meanwhile nan company's stock value has fallen almost 10% complete nan past week.
The retailer's shares fell by 2.5% successful greeting trading connected Monday, arsenic nan week began pinch nary update for customers aliases investors astir its determination to region online orders connected Friday.
About a 3rd of M&S's clothing and family goods' income successful nan UK are done its online platforms and were worthy immoderate £1.268bn successful latest published financial results.
Susannah Streeter, caput of money and markets astatine Hargreaves Lansdown, said moreover though M&S's beingness stores were still open, galore of them "simply don't banal nan celebrated ranges from online".
She added apparel income were "likely to return a large hit" arsenic nan cyber-attack had occurred during a spell of lukewarm upwind erstwhile summertime ranges would beryllium "piling up successful virtual baskets".
Additional reporting by Michael Race