As the disruption continues, journalists and the public are starting to question why it’s taking so long to resolve the issues caused by the attack.

To help shed light on the challenges involved, we spoke with Professor Oli Buckley, a cyber security expert at Loughborough University.

"Marks & Spencer isn’t just facing a small hiccup with one of their systems, they’ve been hit by the full force of a ransomware attack. Sadly, they don’t usually come with quick fixes", said Professor Buckley.

"It’s a really stark illustration of how the real-world is underpinned by the digital domain, and if something is damaged digitally it can have knock on effects in reality.

"It seems like the DragonForce ransomware is at the root of the attack, with most experts pointing the finger at Scattered Spider. They are a loose network of hackers, known for bold and damaging attacks such as the attacks that targeted MGM Las Vegas.

"When ransomware hits, it's like setting off a digital bomb: data gets encrypted, systems go dark, and recovery means rebuilding safely from the ground up, not just turning things back on.

"M&S is currently working around the clock, but even the best-prepared organisation can’t bounce back from this in a few days. Backups take time to restore. Every corner of the system needs to be checked and cleaned, and when dealing with criminals, there's no quick or trustworthy shortcut.

"They are staying tight-lipped, but it’s clear this has cost millions in lost sales and meant that confidence has taken a hit. Still, they’re handling it well and doing all of the right things. Being hit by an attack like this isn’t a sign of inherent weakness and the response is the crucial bit and so far it seems like they’re doing everything right. Cautiously, but right.

"This is a reminder of how disruptive ransomware can be. But it’s also a case study in how to face it with focus and resilience."

To arrange an interview with Professor Oli Buckley, email the Public Relations team or call 01509 222224.