Skip to main content

8 July 2025 - UK economic security - Oral evidence

Committee Business and Trade Sub-Committee on Economic Security, Arms and Export Controls
Inquiry UK economic security

Tuesday 8 July 2025

Start times: 9:30am (private) 10:00am (public)


Add to calendar

M&S Chair Archie Norman to face BTC questions after cyber-attack disrupted online and in-store operations for months 

  • Representatives of Co-op Group that also suffered attack, and cyber-security and law enforcement experts, will also appear  

On Tuesday 8 July the Business and Trade sub-Committee will question Marks and Spencer Chairman Archie Norman on the devastating cyber-attack that has disrupted the iconic British retailer's operations for months.  

Meeting details

At 10:00am: Oral evidence
Inquiry UK economic security
Chairman at Marks and Spencer
General Counsel at Marks and Spencer
Corporate Affairs Director at Marks and Spencer
At 10:30am: Oral evidence
Inquiry UK economic security
Group Secretary and General Counsel at Co-op Group
Group Chief Digital Information Officer at Co-op Group
At 11:00am: Oral evidence
Inquiry UK economic security
Professor of Practise in the Management of Public Organisations at Blavatnik School of Government, University of Oxford
Senior Research Fellow, Cyber and Tech at RUSI
Group Head of Government Affairs and Analyst Relations at NCC Group
At 11:40am: Oral evidence
Inquiry UK economic security
Director General (Threats) at National Crime Agency
Chief Executive Officer (CEO) at National Cyber Security Centre
Detective Chief Superintendent for Cyber and Economic Crime at City of London Police, and National Cybercrime Programme Lead at National Police Chiefs' Council

After acknowledging the attack in April, the company was forced to suspend all online sales for weeks and its website operations are not expected to be fully restored for another month or so. It is believed some customer data was also breached. Marks and Spencer has estimated the attack will hit this year's profits by £300 million. 

At around the same time in April, the Co-op Group disclosed “unauthorised access attempts” that disrupted customer and back-office services.  

What happened in these two cases and what does it tell us about UK’s approach, across the public and private sectors, to countering a commercial and economic risk that may be growing to the point where it becomes “uninsurable”?  

Rt Hon Liam Byrne MP, Chair of the Commitee, said: “This was not just a costly disruption. It was a cyberattack that broke through the digital defences of two of Britain’s most cherished retail institutions—Marks and Spencer and the Co-op—in quick succession.

“That should ring alarm bells. Because if attackers can reach these giants, they can reach anyone. The risk is no longer remote but pervasive and, some fear, uninsurable.

“This session is part of our wider inquiry into a simple question: in these new times how do we safeguard the nation’s economic security, on which the security of the realm now depends?   On Tuesday, we’ll continue our work searching for the truth about the new risks we must now face, and the defences now needed to keep the nation’s economy safer.”

Across four panels that also include national security and law enforcement experts, the Committee will seek to: 

- understand the cyber-security threats facing UK businesses of all sizes now 

- understand how well the UK’s response to economic crime is co-ordinated and resourced  

- understand what changes are needed to legislation and resourcing for the UK’s future economic security and growth. 

Location

Room 5, Palace of Westminster

How to attend