Hackers did not hack the system — but the man: the example of M&S and Co-op is a warning to all of us
In the spring of 2025, two iconic British retail brands, Marks & Spencer and Co-op, became the target of a well-organized yet surprisingly simple cyberattack. The perpetrators were not looking for elaborate exploits or hidden back doors. Instead, they exploited the human factor — more specifically, the naivety of IT helpdesk workers and the overconfidence of organizations. The incident was not only painful for the victims: it has lessons for the entire industry.