A harsh lesson in cyber-security

A harsh lesson in cyber-security
10 June 2025 Gill Hibbins

As you’ve probably heard by now, Marks & Spencer (good old ‘M&S’) suffered a cyber-attack recently that wiped a whopping £700m off their valuation!   

To add insult to injury, they continue to lose an estimated £40 million in online sales each week.  

The Co-op and Harrods have also been clobbered, and even without the gory details, I’m already betting they regret not having done (even) more to protect themselves 

Sad to say, but in cyber security, it’s not ‘if’ there’s an attack, it’s ‘when’. The truth is that most organisations are already being ‘tested’ every day with phishing emails and firewall probes. They withstand these tests because they have basic security protections in place, but the hackers and scammers are getting ever-more sophisticated.   

The good news 

According to the National Cyber Security Centre, adopting the basic protections needed for Cyber Essentials certification will reduce the need for a cyber-related insurance claim by 92%older research indicates CE adoption reduces breach impact by 99% 

So, to keep you safe, we’ve drawn up a set of IT minimum practices, designed to ensure ongoing compliance with both General Data Protection Regulations (GDPR) and Cyber Essentials (CE).  

Even better, as part of our service, Grace Solutions assess your basic IT health using our specially-developed ‘IT scorecard’. This shows you how your security and tech health rates against recommendations.  

And we do it throughout the year too – because there’s no point being compliant on the day of your CE certification, but not on the day you’re attacked.  

So, if you have any doubts about your preparedness for a cyber-attack, let’s talk… asap!  

If you’d like to discuss any aspect further, simply reply to this email, give us a call on 01223 903 800, or book a call with our top techs at: https://calendly.com/hello-gsl/mtg-25min