Katchr Podcast: Law firm cyber resilience – lessons from the M&S data breach
Katchr Managing Director Graham Moore spoke with Brett Warburton-Smith, Partner at Lockton, about the recent Marks & Spencer “Scattered Spider” cyber-attack and what law firms can learn from it.
Brett explained how industrial-scale ransomware operations exploit human behaviour and supply-chain weaknesses, why detection speed is critical, and how cyber insurance can support recovery. For risk and compliance leaders, this conversation is a wake-up call: even well-protected firms remain vulnerable unless staff awareness, vendor oversight, and breach-response planning work hand-in-hand.
Listen here to learn:
- The industrialisation of cybercrime and what that means for law firms.
- Why your weakest link might be a supplier, not always internal staff.
- How multi-factor authentication can still be a point of failure.
- The role of insurance and breach-response partners in mitigating damage.
- Practical, human-centred steps to strengthen cyber resilience.



