Uh oh! It’s happened again.
Twice in the last month, major UK retailers have been hit by cyber-attacks — and the damage has been huge. Both M&S and the Co-op suffered data breaches that caused serious financial and reputational fallout.
You’d expect big players like these to have strong defences, right? They’ve got the budgets, after all. But here’s the thing — cyber security isn’t just about money. It’s about mindset. The companies that stay safest are the ones that build a culture of constant vigilance. And that starts with people — the weakest link and biggest risk.
Think you’re too small to be a target?
Think again. SMEs, charities, and smaller organisations are just as likely to be hit — often more so. That’s because hackers see them as softer targets. When attacks involve ransomware or social engineering tactics, it’s not size that matters, it’s vulnerability.
Ransomware holds your data hostage until you pay up (often in crypto). Social engineering tricks staff into handing over the keys — like what happened at M&S, where attackers reportedly duped help desk staff into granting access, leading to losses of £300 million and a £1bn market dip.
At the Co-op, member data was stolen and operations were disrupted, with delivery delays and empty shelves across stores.
Here’s how to stay a step ahead:
Given 43% of UK businesses reported experiencing a cybersecurity breach or attack in the past 12 months – with a notable rise in ransomware crimes – it’s clear that cyber threats aren’t going anywhere.
But your business doesn’t have to be an easy target. The good news is there’s a lot you can do to reduce your risk. It’s also worth noting that cyber security isn’t just for the IT team — it’s a company-wide effort. With the right tools, habits, and support in place, you can build a stronger, safer business from the inside out.
• Don’t sleep on 24/7 monitoring
Cyber threats don’t clock off at 5pm. Round-the-clock monitoring helps you spot suspicious activity fast and act before it snowballs.
• Keep everything updated — not just Windows
Every bit of software needs patching – not just your main systems. From finance tools to time-recording apps, keeping everything up to date is key. At HG Technology, we can help with the right approach to keep vulnerabilities in check.
• Train your people — and keep training them
Most breaches start with human error. We partner with uSecure, a smart platform that delivers tailored cyber awareness training, phishing simulations, and ongoing risk assessments based on individual behaviour. And to bring this learning to life, we also run in-person and virtual training sessions to help your teams spot threats and form secure digital habits.
• Make home working safer
Remote work isn’t a security holiday so encourage good habits:
Keep systems updated
Use strong passwords (three random words is a great start)
Change default Wi-Fi passwords
Lock your screen when stepping away
Avoid public Wi-Fi
Check for secure websites (https, not http)
• Have a response plan — and test it
If something happens, knowing what to do can save days of downtime and thousands in recovery costs.
• Cyber insurance isn’t optional anymore
A good policy can cover legal fees, data recovery, and help repair your reputation.
• Certifications show you mean business
Achieving Cyber Essentials Plus or ISO 27001 proves your commitment to security and gives you a strong framework to work from.
• Build a security-first culture
Real cyber resilience means secure habits become second nature. That starts with identifying risky behaviour, educating your team, and supporting them with the right tools.
• Companies have responsibilities too
It’s not all on users. You should also:
Set and enforce clear policies
Review audits and access logs regularly
Embrace the cloud (ditch on-premises servers)
Use tools that prevent risky actions before they happen
Worried about your own setup?
If you’re unsure how vulnerable your business is, HG Technology offers a free security audit to help you find out. It’s quick, pressure-free, and gives you practical insight into what needs improving — including how tools like uSecure, and tailored staff training, can strengthen your defences.
Get in touch today to book your audit. As the high-profile data disaster stories show, it’s better to be safe than sorry.