The Chairman of the UK Retail Giant Marx and Spencer refused to tell a panel of MPs whether the company had paid a hacking group after the ransomware attack earlier this year.
“We have said that we are not discussing any details of our conversation with the threatening actor,” the chairman Archie Norman said, referring to the payment of ransom. “We don’t think it is partly known in the public interest because it is a matter of law enforcement.”
Norman said that at Marx and Spencer “anyone” interacts directly with a cyber criminal, which he held responsible for the Rainmware Gang Dragonforce.
In May, Marx and Spencer revealed Hackers had stolen an unspecified amount of customer data, including name, date of birth, home and email address, phone number, domestic information and online order history. Breach disrupted operations for weeks, left the shelves empty, and the customers were unable to order online.
Norman told the MPs that the company is still dealing with recovery efforts and will continue to do so by October or November.
