On April 18th Stuart Machin, the boss of Marks & Spencer (M&S), received a phone call every chief executive dreads: his security team had detected a cyber-attack on the retailer. The timing couldn’t have been worse. It was the start of a sunny Easter weekend and Brits were splashing out on summer dresses and picnic food. For the next two weeks Mr Machin and his team slept in the office.