The M&S cyber-attack is costly and embarrassing, but it should pull through

If £300m can be whittled down to £150m, it’s a big hit but still a long way from upsetting M&S’s broader revival

Shouldn’t a robust IT system be able to withstand the odd “human error”, such as somebody at a third-party supplier being hoodwinked by devious cybercriminals? Isn’t £300m at the expensive end for these events? And should it really take four-and-a-half weeks, and counting, for one of the UK’s biggest and well-resourced retailers to restore its website to working order?

The response of Marks & Spencer’s chief executive, Stuart Machin, to such questions ran along these lines: the incident had nothing to do with underinvestment in IT; everyone is vulnerable; M&S was unlucky; the “moment in time” will pass and everything will be back to normal by July at the latest.