"The CMC estimated in June that the financial impact of the attacks on the two retailers was between £270 million and £440 million. The investigation into the JLR attack is being led by the National Crime Agency but few details have emerged on who was behind the incident. The CMC estimate did not include assumptions about whether JLR had paid a ransom or not."
"But cases like JLR underscore the increasing risks of attackers not just stealing data but destroying critical networks supporting a company's operations, and the high costs associated with such attacks. While state actors have not been behind recent attacks on M&S and other retailers, Martin warned that there was an increasing "geopolitical vulnerability" and risk that hostile nation states could attack UK businesses for non-financial reasons."
The CMC estimated in June that the financial impact of the attacks on the two retailers was between £270 million and £440 million. The investigation into the JLR attack is being led by the National Crime Agency, with few public details on perpetrators, and the CMC estimate made no assumption about ransom payments. Companies prioritise protecting customer data because of legal obligations. Attacks like JLR demonstrate growing risks of destructive operations that erase critical networks and generate high costs. State actors were not behind recent retail attacks, but the geopolitical threat to UK businesses is increasing. The NCSC recorded 204 nationally significant incidents in the 12 months to August 2025, up from 89.
Read at Ars Technica
Unable to calculate read time
Collection
[
|
...
]