--- title: "Retail Exposure Crisis: Policy Pressure and Bre… | Firevault" description: "2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt#webpage", "url": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt", "name": "Retail Exposure Crisis: Policy Pressure and Bre…", "description": "2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "Retail Exposure Crisis: Policy Pressure and Breach Wave", "item": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "Retail Exposure Crisis: Policy Pressure and Breach Wave", "description": "2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches…", "url": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2025-05-23T18:20:40+00:00", "dateModified": "2026-08-28T08:03:22.256672+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/retails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt" }, "inLanguage": "en-GB", "articleSection": "Opinion", "wordCount": 498, "keywords": "Retail, Opinion, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches prove the sector’s exposure: Marks & Spencer : £300M breach via third-party IT contractor Harrods : Data leak triggered store-wide network lockdown Peter Green Chilled : Ransomware froze UK supermarket supply lines Legal Aid Agency : Domestic a", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2025 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) [Knowledge Vault](/learn/knowledge)/ [Opinion](/learn/knowledge?filter=opinion) Opinion · 23 May 2025 # Retail Exposure Crisis: Policy Pressure and Breach Wave 2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches… ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 3 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fretails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fretails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt&text=Retail%20Exposure%20Crisis%3A%20Policy%20Pressure%20and%20Breach%20Wave%0A%0A2025%3A%20When%20Cybersecurity%20Became%20a%20Political%20Issue%20Parliament%20is%20asking%20a%20blunt%20question%3A%20%E2%80%9CWhy%20are%20UK%20retailers%20still%20leaking%20customer%20data%3F%E2%80%9D%20Major%20breaches%E2%80%A6)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fretails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt)[](mailto:?subject=Retail%20Exposure%20Crisis%3A%20Policy%20Pressure%20and%20Breach%20Wave&body=2025%3A%20When%20Cybersecurity%20Became%20a%20Political%20Issue%20Parliament%20is%20asking%20a%20blunt%20question%3A%20%E2%80%9CWhy%20are%20UK%20retailers%20still%20leaking%20customer%20data%3F%E2%80%9D%20Major%20breaches%E2%80%A6%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fretails-exposure-crisis-policy-pressure-political-fallout-and-the-breach-wave-only-firevault-can-halt) ![A closed retail storefront with shutters down at dusk with ambient street lighting](/__l5e/assets-v1/2b8767ec-6dad-4df5-86ba-14ee23170188/retail-exposure-crisis-1771248346427-2x.jpg) A closed retail storefront with shutters down at dusk with ambient street lighting Why it matters ## What this means for organisations holding critical data 2025: When Cybersecurity Became a Political Issue Parliament is asking a blunt question: “Why are UK retailers still leaking customer data?” Major breaches… In this analysis **On this page** **2025: When Cybersecurity Became a Political Issue** Parliament is asking a blunt question: **“Why are UK retailers still leaking customer data?”** Major breaches prove the sector’s exposure: - **Marks & Spencer**: £300M breach via third-party IT contractor - **Harrods**: Data leak triggered store-wide network lockdown - **Peter Green Chilled**: Ransomware froze UK supermarket supply lines - **Legal Aid Agency**: Domestic abuse victim data breached Retail is now under political scrutiny, and pressure is mounting for executive accountability and offline protection mandates. **The Policy Backdrop: Regulators Are Reloading** - **ICO Guidance (2025):** Reinforces that _loss of availability_ is now fineable under GDPR - **Data Protection & Digital Information Bill:** Enables increased penalties for repeat offenders - **NIS2 (EU) & NIS Reg (UK):** Retail now seen as [critical infrastructure](/control-for-critical-infrastructure) - **NCSC Guidance:** Boards must implement isolation controls for crown-jewel data, not just encryption **Translation for boards:** regulators no longer accept “we were hacked” as an excuse if the data never needed to be online in the first place. **Why Classic Controls Keep Failing** Always-On Reality Result in Retail Cloud loyalty platforms integrate with dozens of mar-tech APIs Tokens leak → full purchase histories exposed Supplier contracts sit in shared drives for “collaboration” One phish → pricing & margin intel published POS archives sync to SaaS backup every night Ransomware hits → store tills freeze **Firevault: Architecture Aligned with Policy** Regulatory Demand Firevault Response **GDPR Art. 32(c):** “ensure ongoing confidentiality, integrity and availability” **Confidentiality:** Offline, air-gapped [cold storage](/storage) **Integrity:** Tamper-evident logging inside the vault **Availability:** Optional icevault™ mirror **NCSC Supply-Chain Principle 7:** “Isolate high-risk assets from supplier networks” Zero IP stack, zero vendor endpoints, physically unreachable **NIS2 Art. 21:** “state-of-the-art, proportional technical measures” Physical disconnection is the ultimate proportional control **Business Comfort: De-Risking the Three Worst-Case Scenarios** - **Mass Customer-Data Leak** Offline vaulting of loyalty core means even a compromised CRM mirror exposes, at worst, anonymised tokens – not PII. - **Supplier-Pricing Extortion** Contracts and rebate schedules are vaulted; adversaries can’t threaten to publish what they can’t locate. - **Operational Paralysis** Crisis playbooks, offline stock sheets and payment-switch keys live in Firevault, so the recovery team has undisputed originals while systems are rebuilt **Political Capital: Turning Security into a Competitive Advantage** Boardroom narrative shifts from “we hope our controls hold” to “our critical data is unreachable.” This message resonates with: - **Shareholders:** lower tail-risk improves valuations - **Consumers:** trust a retailer that proves their data isn’t permanently online - **Regulators:** demonstrable “state-of-the-art” isolation slashes fine exposure **From Exposure to Assurance, The Retail Playbook** 1. **Classify:** Identify the 2. **Vault:** Move them into Firevault’s offline cold-storage tiers (2 TB–8 TB) 3. **Mirror:** (Optional) Deploy IceVault™ for a second, offline-to-offline replica 4. **Govern:** Update policies to reference “critical data isolation,” satisfying GDPR, NIS2 and DPDI Bill expectations 5. **Sleep:** Because ransomware cannot negotiate for what it cannot find **Conclusion** Regulation is tightening, politics are sharpening, and breaches keep landing. The era of hoping your cloud stays safe is over. **Firevault delivers the only outcome regulators and customers truly want: data that is impossible to steal.** **This is Firevault. Disconnect to Protect.** [Explore Firevault for Retail](/solutions/industry/retail) _Sources: Guardian, Reuters, BBC, NCSC, ICO updates_ About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## A recovery copy an attacker cannot reach Offline Secure Storage® keeps a clean copy of your data on hardware that is physically disconnected, so backup and recovery do not depend on systems an intruder can touch. [Get started](/get-started)[Talk to the team](/demo) **Hardware**Your copy sits on dedicated encrypted hardware **Disconnect**Offline by default, connected only when you say so **Recovery**A known-clean copy to rebuild from, on your timetable **Location**Held in a secure Firevault Bunker Related Reading ## You may also find these useful [ ![Zero-Copy Cloud is Not the End of Lock-In. It is the Start of a New One](/__l5e/assets-v1/13d1c397-693e-44a7-b9e6-67b730df160d/zero-copy-cloud-lock-in-2026-2x.jpg) Opinion ### Zero-Copy Cloud is Not the End of Lock-In. It is the Start of a New One SAP and Google Cloud have made data migration quietly optional. The data stays put. The operating judgment built above it does not. That is the lock-in the architecture diagram will never show. 29 Jul 2026 4 min ](/news/zero-copy-cloud-lock-in-opinion-2026)[ ![World Backup Day 2026: Backups Are Not Enough](/__l5e/assets-v1/d7a77b5b-74d6-4c42-88b9-4e64057bbe9f/world-backup-day-2026-2x.jpg) Opinion ### World Backup Day 2026: Backups Are Not Enough Every 31 March, World Backup Day reminds organisations to protect their data. But in 2026, the real question is not whether you back up. It is whether your backups can survive the attack that is coming for them. 31 Mar 2026 5 min ](/news/world-backup-day-2026-why-backups-alone-are-not-enough)[ ![Offline by Default: UK 2025 Breaches Survey](/__l5e/assets-v1/148183a0-5cd6-459e-9752-5b6c6b5c5d3f/offline-by-default-breaches-survey-1771248019056-2x.jpg) Opinion ### Offline by Default: UK 2025 Breaches Survey The UK Government’s Cyber Security Breaches Survey 2025 is a useful reality check for anyone responsible for risk, data, or continuity. Four in ten businesses… 7 Nov 2025 4 min ](/news/offline-by-default-what-the-uks-2025-breaches-survey-really-means-for-leaders)[ ![NCSC Annual Review 2025: A Call for Leadership](/__l5e/assets-v1/a036e289-1fb4-404b-b8fb-b5ea65e55ef5/ncsc-annual-review-2025-1771248020862-2x.jpg) Opinion ### NCSC Annual Review 2025: A Call for Leadership Stop talking about prevention. Start building resilience. The National Cyber Security Centre (NCSC) Annual Review 2025 doesn’t read like a report, it reads… 7 Nov 2025 5 min ](/news/ncsc-annual-review-2025)[ ![Airport WiFi sign-ups turn into a national data problem as 8.7 million customer records are accessed](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/manchester-airports-group-data-breach-2026.jpg) Insight ### Airport WiFi sign-ups turn into a national data problem as 8.7 million customer records are accessed Manchester Airports Group has confirmed that criminal hackers accessed the data of about 8.7 million customers across Manchester, East Midlands and London Stansted. Most of it came from free terminal WiFi sign-ups and from car parking, lounge and fast-track bookings. 27 Aug 2026 5 min ](/news/manchester-airports-group-data-breach-87-million-customers-2026)[ ![Premier League moves the goalposts as cyber rulebook introduces 22 security control areas](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/premier-league-cyber-rulebook-2026.jpg) Regulation ### Premier League moves the goalposts as cyber rulebook introduces 22 security control areas Rule J.9 and Appendix 11 put cyber security into the Premier League rulebook, with phased deadlines, annual evidence and 22 control areas spanning club, stadium and supplier operations. 27 Aug 2026 14 min ](/news/premier-league-cyber-rulebook-appendix-11-2026) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/offline-secure-storage/what-is-oss) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)