Wilfred Emmanuel-Jones, the entrepreneur behind the Black Farmer brand, is experiencing unsettling echoes of the past. During the pandemic, he faced daily order cancellations from customers, a situation that has resurfaced with recent cyberattacks affecting two of his main clients, the Co-op and Marks & Spencer (M&S). “After the Co-op hack, they just told us to stop [and to] not supply any products,” he recalled. The impact on his sausage production has been severe, forcing him to halt manufacturing and resulting in significant financial losses. For Emmanuel-Jones, this serves as a stark reminder of how disruptions in larger retailers can reverberate throughout the supply chain, disproportionately impacting smaller businesses.
The ramifications of the cyber breaches extend beyond individual suppliers, disrupting operations for two of the UK’s most prominent food retailers. As customers of M&S and the Co-op contend with empty shelves, it becomes clear that the aftershocks are far-reaching. Suppliers, as they adapt to the new realities, find themselves with nowhere else to turn. In essence, while consumers express frustration over availability, many suppliers are struggling to reclaim lost revenue and re-establish their own chains.
Reports indicate that, three weeks into the crisis, M&S has been proactive in addressing the shortages, having developed new software applications to help streamline its logistics. The Co-op has also mobilised to restore supply, dispatching a fleet of lorries to essential destinations. Yet, in city centre branches, such as those in London, gaps remain visible. M&S has assured that most suppliers have not been significantly affected, though the reality on the ground tells a different story. From ambient goods to clothing, the complex nature of supply chains has revealed vulnerabilities further accentuated by these attacks.
Both retailers have reported effectively managing the immediate chaos by closing parts of their IT infrastructure. This necessary precaution left stores unable to communicate adequately with their distribution centres, adding to the backlog of goods. One M&S drinks supplier described being instructed to delay shipments, as the firm prioritised essential products amidst the turmoil. Despite concerns, many suppliers have expressed appreciation for M&S’s communication, although the situation is undeniably challenging.
M&S’s troubles have an economic dimension beyond lost orders. The company anticipates claiming up to £100 million from its cyber insurance, following a report indicating that the cyber breach may have cost it more than £60 million in lost revenues and contributed to a notable 16% drop in its share price. The exposed personal data from this incident—ranging from contact details to order histories—has raised concerns about customer safety, albeit payment details and passwords remain secure. With numerous breaches reported across the retail sector, including incidents affecting Harrods and the Co-op, experts are warning of a burgeoning cyber threat landscape, driven partly by advances in generative artificial intelligence.
The urgency of embracing robust cybersecurity measures has not gone unnoticed by small business owners, who now view cyberattacks as a predominant concern, competing with supply chain disruptions. According to a recent survey, 60% of small business operators acknowledged cybersecurity as a significant issue. The same study found that many have begun investing in advanced protective tools, reflecting a heightened battle to fortify against digital threats. Yet, paradoxically, while pursuing cybersecurity improvements, many smaller firms find themselves constrained in their growth efforts.
Research underlines the severity of the impacts on UK businesses: 95% have experienced negative consequences due to cybersecurity incidents in their supply chains, significantly higher than the global average. Alarmingly, 34% are reportedly unaware of such incidents, emphasising the critical need for enhanced risk management protocols. As the authorities investigate these hacking incidents and provide support, the spotlight remains on organisations to adopt a more proactive stance against potential vulnerabilities in their systems.
The ongoing struggles faced by Emmanuel-Jones and other small suppliers reveal a broader concern within the UK’s retail ecosystem. As larger corporations like M&S navigate the fallout of cyberattacks, the ramifications echo downwards, affecting those who are least equipped to absorb such shocks. The narrative is a cautionary tale of interconnectedness in modern commerce, illustrating that while larger retailers are indeed the focus of cybercriminals, it is often the smaller enterprises that bear the brunt of these disruptive events.
Finally, as M&S and the Co-op work tirelessly to restore normal operations and build resilience against future cyber threats, the experience highlights the pressing need for comprehensive measures across the entire supply chain to safeguard against vulnerabilities and ensure that smaller businesses like Emmanuel-Jones’ can withstand the turbulence of the digital age.
Reference Map
1: All paragraphs
2: Paragraph 5
3: Paragraph 6
4: Paragraph 7
5: Paragraph 8
6: Paragraph 9
7: Paragraph 10
Source: Noah Wire Services



