7 views 2 mins 0 comments

Marks & Spencer Cuts Ties With Tata Consultancy Services, But It Wasn’t Because of the Data Breach

In Vendor News, Data Breach News
October 27, 2025

The Cyber Security Hub Newsletter reports:

British retail giant Marks & Spencer (M&S) has officially ended its long-standing partnership with Indian IT services leader Tata Consultancy Services (TCS) after suffering one of the most damaging cyberattacks in its history. The high-profile breach, which occurred earlier this year, is estimated to have cost the company around £300 million in losses, disrupting its digital infrastructure and severely impacting operations across the UK.

Tata Consultancy Services (TCS) is a leading Indian multinational company that provides information technology (IT) services and consulting solutions. Headquartered in Mumbai It is a part of the Tata Group and has a global presence with a large workforce (600k+) , serving clients in various industries across 55 countries. Notable clients include Jaguar Land Rover, British Airways, Boots, Diageo, and Aviva. Other clients include financial institutions such as Deutsche Bank USA, Indian Bank, and RBC Investor & Treasury Services, and businesses like Mitchells & Butlers and the British Council.

According to industry sources, M&S terminated its technology helpdesk and support contract with TCS in July 2025, marking the end of a collaboration that had spanned several years. The decision reportedly came just months after the cyberattack forced the retailer to suspend its online shopping platform for an extended period, leaving millions of customers unable to place orders. The disruption also created widespread supply chain and inventory challenges, resulting in empty shelves across many of its physical stores and damaging the company’s reputation for reliability and customer service.

Read more at the Cyber Security Hub Newsletter.

There were many headlines yesterday that might have suggested M&S terminated its relationship with TCS because of the massive data breach, but that apparently wasn’t the case. M&S had already begun terminating the relationship months before the cyberattack and has continued its other relationships with TCS. TCS seems understandably upset about much of the media coverage on this.