Main menu For students For teachers Explore our subjects Student events & courses

Free Business resources

Teaching Activities

Cybersecurity: Under Attack at M&S | Activity | AQA A-Level Business (2026) Unit 3.3.4

Level:
A-Level
Board:
AQA

Last updated 25 Jun 2026

Share this content:

This Marks and Spencer-based case study explore cybersecurity risk, operational disruption, financial losses, reputational damage, staff training and practical measures business might take to reduce future attacks and impacts.

Students examine the 2025 cyber attack on Marks & Spencer and its effects on online sales, stock management, operating profit, efficiency and customer trust. They define cybersecurity risk, explain two ways the incident harmed the business and assess why staff and contractor training matters when attacks rely on impersonation or social engineering. The final task asks students to recommend a protective measure, such as multi-factor authentication, stronger identity checks, backups, monitoring, contingency planning or supplier controls.

Download Cybersecurity: Under Attack at M&S Activity

Share this content: