Comparison Overview
B&M Retail

B&M Retail
Estuary Commerce Park , Liverpool, Merseyside, GB, L24 8RJ
Last Update: 03/04/2026
B&M is a fast-growing discount retailer, operating from over 750 high street and out of town stores across the UK, with a team of over 38,000! In the UK, we offer customers a broad range of FMCG brands and non-grocery products at sensational prices. Our aim is to prov...

Marks and Spencer
Waterside House, London, W2 1NW, GB
Last Update: 02/05/2026
At M&S, we're dedicated to being the most trusted retailer, prioritising quality and delivering value. Every day, we bring the magic of M&S to our customers, whenever, wherever and however they want to shop with us. For over a century, we've set the standard, doing the ...
Compliance Ranges Comparison

B&M Retail







Marks and Spencer






Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for B&M Retail in 2026.
Incidents vs Retail Industry Avg (This Year)
Marks and Spencer has 358.72% more incidents than the average of all companies with at least one recorded incident.
Incident History - B&M Retail (X = Date, Y = Severity)
B&M Retail cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marks and Spencer (X = Date, Y = Severity)
Marks and Spencer cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

B&M Retail

Marks and Spencer
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.