Inventory Visibility in the Supply Chain: UK Retail Guide

Inventory Visibility in the Supply Chain: What M&S and Co-op's £500m UK Retail Failures Teach Us

Most retailers don't lose inventory. They lose inventory visibility across the supply chain. And in 2025, two of Britain's best-known retailers found out exactly what that costs.

Marks & Spencer switched off its stock systems in April 2025 to stop a ransomware attack from spreading. Six weeks later, staff were still checking fridge temperatures with a clipboard. The Co-op did much the same thing three weeks after that, and shelves in its 2,300 stores stayed empty for weeks. Between them, the two attacks cost more than £500 million and briefly turned two of the country's most efficient supply chains back into 1990s stockrooms.

This isn't really a story about hackers. It's a story about visibility, or the lack of it. Both retailers found out, in the worst possible way, that they didn't actually know where their stock was the moment the system that told them stopped working.

Most mid-market retailers will never suffer a ransomware attack. But the underlying weakness that M&S and Co-op exposed, a single point of failure sitting between the retailer and the truth about its own stock, exists in some form in almost every retail operation in the country. This piece is about that weakness: what it costs, why it's so common, and what mid-market UK retailers should actually do about it.

Inventory Visibility and Supply Chain Distortion: The Scale of the Problem in UK Retail

Inventory distortion, the retail industry's term for the combined cost of stockouts and overstocks, is not a niche operational issue. It's one of the largest unmanaged cost lines in retail.

📊 Chart: Where global inventory distortion losses come from

Out-of-stocks (missed sales)     ████████████████████████  $1.2tn
Overstocks (markdowns/spoilage)  ███████████               $554bn

Source: IHL Group, "Fixing Inventory Distortion" (2024 figures)

Here's what most of that research misses, though: 72% of stockouts are caused by retailer-side issues, not supply chain problems, and 23% of stockouts trace directly to human error in manual processes. The story isn't really about ships stuck in the Suez Canal. It's about retailers who genuinely don't know what's on their own shelves.

That's the diagnosis GrowSights keeps coming back to. Visibility isn't a nice-to-have layered on top of a supply chain. It's the thing that determines whether the supply chain works at all.

What Inventory Visibility Actually Means for a Retail Supply Chain

Strip away the vendor language and inventory visibility means one simple thing: at any given moment, can you say, with confidence, how many units of a given product exist, and where they are, across your entire operation?

For most mid-market retailers, the honest answer is "roughly." Stock counts are true the moment they're taken and steadily decay in accuracy from there, as goods move between the warehouse, the store floor, the stockroom, click-and-collect holding, and the returns pile. Traditional supply chain methods rely on manual tracking systems prone to human error, and disconnections between departments create silos that cause delays in communication.

The industry's own language gives away how serious the gap is. Retailers with cross-location visibility reduce customer-facing stockouts by up to 50% simply by being able to fulfil from a nearby store when one location runs dry. That's not a sophisticated AI capability. It's a basic operational fix that a huge share of mid-market retailers still can't do, because their systems don't talk to each other in real time.

Most mid-market UK retailers with £5m-£50m turnover sit somewhere between the second and third row. That gap, between "I can see my own stock" and "I can see the whole chain," is exactly where M&S and Co-op got hurt.

Case Study: M&S and the Collapse of Supply Chain Visibility

In April 2025, Marks & Spencer discovered a ransomware attack traced back to a third-party IT support contractor. Attackers exploited a less-protected vendor to infiltrate the larger target, demonstrating how a single weak link can destabilise a national retailer. The response was drastic, and correct given the threat: shut the systems down.

Automated inventory and sales systems were switched off to limit damage, forcing stores to fulfil urgent needs manually, with newswires reporting food halls running low and gift-card terminals, returns kiosks and loyalty services offline. A retailer with over a century of operational history was, within days, running on the same tools a corner shop used before barcodes existed.

"Automated ordering and stock systems" were forced offline, and M&S "had to revert to pen-and-paper to track fresh food and clothing supplies, leaving some shelves bare." — Timeline analysis, BlackFog cybersecurity research, 2025

The financial toll was severe. M&S reported adjusted profit before tax fell 55.4% in the first half of the year, after the cyberattack forced a seven-week suspension of online clothing orders and nearly four weeks without click-and-collect. The company booked a projected £300 million profit hit for the fiscal year, despite having posted its best adjusted pretax profit in over 15 years, £876 million, just months earlier.

What's most instructive for mid-market operators isn't the ransomware itself. It's what the outage revealed: M&S's stock accuracy depended entirely on a single automated layer. Remove that layer and the business had no fallback view of its own inventory. Weeks into recovery, the CEO was still describing the situation in terms of getting "stock flowing well" again, treating basic stock availability as a milestone worth publicly celebrating.

📊 Chart: M&S recovery timeline (2025)

Attack detected           Late April
Online orders suspended   7 weeks
Click & collect suspended  ~4 weeks
Stock flow back to normal  ~8 weeks
Full digital recovery      Forecast March 2026

Source: Compiled from Computer Weekly, EasternEye and BlackFog reporting, 2025

Case Study: Co-op and the Same Inventory Visibility Failure

Three weeks after M&S, the Co-op suffered a comparable attack, attributed to the same criminal ecosystem. The pattern was near-identical: shut systems down to contain the breach, then discover how little visibility remained once they were gone.

Shelves stayed empty for weeks across the Co-op's 2,300 stores after it switched off back-office and communications systems, and the retailer ultimately declared the damage cost at £206 million. The UK's Cyber Monitoring Centre, in its first in-depth assessment of a major incident, delivered a verdict that should be required reading for every mid-market retail operator in the country:

"The event underscores retail sector vulnerabilities tied to just-in-time stock systems, lack of back-end storage and high dependency on IT-driven order flows. When systems fail, it is challenging to revert to manual processes." — UK Cyber Monitoring Centre, cited in Computer Weekly, September 2025

That's the whole diagnosis in two sentences. Lean, just-in-time stock systems are efficient right up until the moment they aren't, at which point there is no manual fallback because the business never built one. Fable Data's transactional analysis found daily spend at the Co-op dropped 11% during the first 30 days of the incident, and because the Co-op is often the only bricks-and-mortar grocery option in remote parts of the country, the operational failure carried a genuine social cost beyond lost revenue.

Staff on the ground described a two-week lag behind M&S's own recovery, and noted that even once logistics systems came back online, it would take weeks before shelves genuinely reflected it, because of the complexity of pushing goods back through the supply chain. That lag between "systems restored" and "shelves actually correct" is the real lesson. Visibility isn't a switch you flip back on. It's a state you have to rebuild, product by product, location by location.

Why Mid-Market UK Retailers Are More Exposed to Supply Chain Visibility Risk

It would be easy for a £10 million turnover retailer to read the M&S and Co-op stories and conclude this is an enterprise problem. It isn't. If anything, mid-market operators carry more of this risk, for three structural reasons.

First, single points of failure are more common at smaller scale. Enterprise retailers at least have the resources to run parallel systems, backup vendors, and redundant infrastructure. A mid-market operator running one ERP, one warehouse management platform, and one EPOS provider has, in miniature, the exact single-threaded dependency that took down M&S's automated ordering.

Second, manual fallback capability has quietly disappeared. Traditional paper-based record-keeping lacked real-time updates but at least existed as a functioning, if slow, alternative. Most mid-market retailers digitised a decade ago and never kept the manual processes alive as insurance. When the system goes down, there's genuinely nothing behind it, exactly the gap the Cyber Monitoring Centre flagged in the Co-op incident.

Third, and most relevant day-to-day: this isn't only about cyberattacks. A missed system integration, a supplier data feed that silently breaks, a warehouse management system that falls out of sync with the storefront, all produce the same symptom as a ransomware attack: the retailer no longer knows what it actually has. If a demand forecast is off by 30%, a third of the assortment ends up either gone too soon or gathering dust, and either way margin suffers. Cyberattacks make headlines. Slow-motion visibility decay doesn't, but it costs mid-market retailers money every single week.

Key insight for retail leaders: The M&S and Co-op stories are extreme versions of an ordinary failure mode. Every retailer running on a single, unaudited system is one outage away from the same clipboard-and-guesswork state those two businesses were forced into.

The Cost of Poor Inventory Visibility for Mid-Market UK Retail

For a £5m-£50m UK retailer, the trillion-pound global figures aren't useful on their own. What matters is the shape of the loss at that scale.

Even the low end of that range is a meaningful hit to a business with thin retail margins. And unlike a one-off cyberattack, this is a recurring annual cost, quietly baked into the P&L as "shrinkage," "markdowns," or "lost footfall conversion" rather than being labelled for what it is.

The average stockout lasts 35 days from first occurrence to full replenishment, and during that window every customer who comes looking for the product represents a lost sale, or worse, a lost customer. For a mid-market retailer without the brand loyalty of an M&S or a Co-op to fall back on, that second outcome, the lost customer rather than the lost sale, is the more dangerous one. Shoppers who can't find what they want at a smaller retailer don't wait it out. They go to Amazon, or to the nearest big-box competitor, and many don't come back.

📊 Chart: What happens to a customer who hits a stockout

Buys a substitute product in-store    ~35%
Delays purchase, may return later     ~25%
Switches to a competitor              ~40%

Source: Aggregated from industry stockout research, 2026

There's a second, quieter cost mid-market retailers rarely put a number on: the labour spent chasing the problem after it's already happened. Every stockout that reaches the shop floor triggers a small chain reaction, a staff member checking the stockroom, a manager calling the warehouse, a supplier email asking where an order has got to. None of that shows up as a distinct line in the accounts. It shows up as "why is my ops team always firefighting instead of planning," which is one of the most common complaints GrowSights hears from mid-market retail founders directly.

Shrinkage, Data Quality, and Supply Chain Visibility in UK Retail

Inventory visibility gets discussed as a technology problem, but a meaningful share of it is a trust problem: retailers frequently don't trust their own numbers, because those numbers have been quietly wrong for years.

Organised retail crime and theft jumped to $379 billion globally, and while prosecution has become more stringent in some markets, accuracy of tracking remains compromised by shrinkage at the store, warehouse, and supply chain level. That's the uncomfortable part. Shrinkage doesn't just cost the value of the stolen or lost goods. It corrupts the underlying stock record that everything else, replenishment, forecasting, online availability, depends on. A stock system that says twelve units are on a shelf when three have walked out the back door isn't a minor inaccuracy. It's a system actively lying to the person trying to run the business.

For mid-market retailers specifically, this compounds in a way it doesn't for larger chains. A big grocer can absorb a few percentage points of stock inaccuracy across thousands of SKUs and still run reasonably well on aggregate. A mid-market retailer with a tighter, more curated range feels every inaccurate count directly, because a handful of miscounted SKUs can represent a meaningful share of total revenue.

AI-powered demand forecasting reduces supply chain errors by 20-50% compared to manual methods, and eliminating the human error factor addresses roughly 23% of stockouts outright. But that's only true once the base data going into the model is trustworthy. Feed a forecasting tool six months of stock counts that were never actually accurate, and it will forecast the wrong thing with impressive confidence. This is the trap that catches out retailers who buy technology to solve a problem that is, underneath, a discipline problem: nobody owns the stock count, nobody audits it regularly, and nobody is accountable when it drifts.

The fix isn't glamorous. It's a regular, disciplined cycle count process, someone genuinely accountable for stock accuracy as a KPI, and a willingness to treat a 2% variance as a signal worth investigating rather than a rounding error to write off at year-end.

Improving Supply Chain Visibility: The Technology Layer for UK Retail

It isn't all bad news. UK retail is investing heavily in closing the visibility gap, and the tools available to mid-market operators today are far more accessible than they were even three years ago.

Retailers are investing in adaptive real-time supply chains with AI forecasting, inventory optimisation and automated replenishment, using standardised product, location and logistics identifiers to enable accurate inventory tracking, improved supplier coordination and faster fulfilment. This is the GS1 UK view of where the industry is heading, and it's consistent with what GrowSights sees across the mid-market retail brands we work with directly.

The adoption curve backs this up. RFID deployment is expected to grow 291% over the next two years, and computer vision and image recognition adoption is projected to grow by 8,143%, as AI and machine learning implementations show positive results for 76% of retailers specifically in demand planning and forecasting.

But there's a catch that matters enormously for mid-market retailers specifically: less than one-fourth of retailers have successfully rolled out AI/ML in the areas most impacted by inventory distortion, creating what researchers term "AI Haves and Have-nots," with retailers deploying AI achieving sales growth 2.3 times higher and profit growth 2.5 times higher than competitors.

That gap is not primarily about budget. It's about sequencing. Retailers who try to bolt AI forecasting onto messy, disconnected underlying data get worse results, not better ones, because the model is only as good as the visibility feeding it. The IHL research puts it plainly: retailers achieving superior performance demonstrate systematic data management capabilities and the use of integrated technology platforms rather than point solutions.

A practical plan for UK supply chain visibility focuses on clear milestones, reliable data, and fast exception handling: mapping key handoffs from purchase order to last-mile, adding simple barcode or RFID scans at warehouses, and layering ETA prediction with basic AI, prioritising the highest-volume routes first. Notably, none of that requires enterprise-scale spend. It requires sequencing the basics correctly before layering on anything more sophisticated.

UK Retail Supply Chain Visibility: A Competitor and Market Comparison

The gap between retailers who invested in visibility infrastructure before a shock hit, and those who hadn't, is stark when you line the recent UK cases up side by side.

The UNFI breach, which rippled outward from a single distributor rather than a retailer's own systems, still left Whole Foods shelves bare, showing that visibility risk doesn't stop at your own four walls, it extends to every supplier you depend on. That's worth pausing on for mid-market retailers who assume their exposure is limited to their own systems. It isn't. Supplier-side visibility failures hit exactly as hard as internal ones, and mid-market retailers typically have far less leverage to demand resilience commitments from their suppliers than an M&S or a Tesco does.

The Trust Cost of Poor Inventory Visibility in Retail Supply Chains

The financial figures attached to the M&S and Co-op incidents, £300 million and £206 million respectively, capture the direct hit. They don't fully capture what happens after the stock comes back.

Fable Data's transactional analysis found daily spend at the Co-op dropped 11% during the first 30 days of the incident. That's a measurable, immediate demand shock. But the harder number to pin down is how many of those shoppers came back once the shelves were full again, and how many quietly shifted a portion of their weekly shop to a competitor and never fully reverted.

Empty shelves erode customer trust, and for retailers, the consequences of an availability crisis extend beyond immediate financial losses into brand reputation damage and a competitive disadvantage as customers turn to rival brands that maintained operations. For a national grocery brand with decades of loyalty behind it, that erosion is real but survivable. For a mid-market retailer with a smaller, more transactional customer base and none of that accumulated goodwill, the same erosion can be existential. A shopper who tries a competitor because your shelf was empty twice in a month has very little reason to come back, because switching cost is low and the emotional attachment to your brand, unlike an M&S or a Co-op, hasn't been built up over a lifetime.

This is worth sitting with, because it changes how visibility investment should be framed internally. It's not really an operations line item. It's a customer retention investment, and arguably one of the highest-leverage ones available to a mid-market retailer, because the alternative, a shopper who leaves after a bad availability experience, is far more expensive to win back than the cost of preventing the experience in the first place.

Key insight for retail leaders: Every stockout is a small trust transaction with a customer who is deciding, in real time, whether your business is reliable enough to keep coming back to. Mid-market retailers without deep brand equity to fall back on have less room to lose that transaction than the national chains making headlines.

Key Lessons on Inventory Visibility for UK Retail Leaders

Lesson 1: Manual fallback isn't nostalgia, it's insurance

Both M&S and Co-op discovered, at enormous cost, that they had no functioning alternative to their automated systems. Mid-market retailers should treat "what happens if this system goes dark tomorrow" as a genuine planning question, not a hypothetical.

Ask yourself: If your primary inventory or ordering system failed right now, how many days could your business operate on what staff actually know, without it?

Lesson 2: Just-in-time and zero visibility buffer are a dangerous combination

The Cyber Monitoring Centre explicitly flagged retail sector vulnerabilities tied to just-in-time stock systems and a lack of back-end storage. Lean inventory is good business. Lean inventory with no data resilience underneath it is a structural risk hiding as an efficiency win.

Ask yourself: Is your stock strategy lean because it's genuinely optimised, or lean because nobody has stress-tested what happens when the system that manages it breaks?

Lesson 3: Supplier-side visibility is your visibility too

The M&S breach originated through a third-party supplier's compromised access, not M&S's own systems. Your visibility is only as strong as the weakest data feed from the weakest supplier in your chain.

Ask yourself: Do you actually know how your key suppliers manage their own operational resilience, or are you assuming it because they're a big enough name?

Lesson 4: AI forecasting is not a fix for messy underlying data

Retailers achieving the strongest inventory performance rely on systematic data management and integrated platforms, not point solutions layered on top of disorganised data. Buying a forecasting tool before fixing base-level stock accuracy just automates the wrong numbers faster.

Ask yourself: If you introduced AI forecasting today, would it be learning from clean, real-time data, or from the same gappy stock counts you already don't fully trust?

Actionable Recommendations for Supply Chain Visibility in UK Retail

For Retail Business Owners and CEOs

• Run a genuine "system down" test: pick a quiet trading day and simulate losing access to your primary inventory system for four hours. Note every decision your team can't make without it.
• Audit single points of failure across your stack, ERP, EPOS, warehouse management, and identify where one vendor outage would stop the whole business, not just slow it down.
• Prioritise cross-location visibility before AI forecasting. Cross-location visibility alone can cut customer-facing stockouts by up to 50%, and it's a fraction of the cost of a forecasting overhaul.
• Treat your top three suppliers' operational resilience as your problem too, not just theirs. Ask what happens to your stock flow if their systems go down for a week.

For B2B Leaders and Suppliers to Retail

• If you supply mid-market UK retailers, expect resilience questions to become standard procurement criteria over the next 18 months, not just price and lead time.
• Build redundancy into your own order-flow and EDI systems now. The UNFI breach demonstrated that a single distributor going down can ripple outward and empty a major retailer's shelves without the retailer itself ever being directly compromised.
• Offer retail customers a documented manual fallback process for placing and confirming orders if your digital systems fail. Most currently can't, and it's becoming a genuine differentiator.

For Industry Strategists and Investors

• Inventory distortion cost data should be treated as a standard due diligence line item for retail investment, not a footnote. A 2.3x sales growth and 2.5x profit growth gap already separates retailers with mature AI-driven inventory management from those without it.
• Watch for regulatory movement. UK discussions around NIS2 and broader critical infrastructure protections are increasingly treating food distribution alongside energy and telecoms as critical national infrastructure. That has direct implications for compliance costs across the mid-market grocery and FMCG supply chain.

The Road to Supply Chain Visibility Recovery

M&S's own timeline is instructive for how long genuine recovery takes, even for a business with deep resources. The retailer is targeting a £600m-£650m technology and resilience investment for 2025/26 specifically to close the operational gap the attack exposed, aiming to boost online penetration through supply chain automation and inventory optimisation. That's not a quick fix. It's a multi-year rebuild, and M&S is one of the better-resourced retailers in the country.

For a mid-market retailer, the equivalent isn't a nine-figure transformation programme. It's a sequenced, realistic set of steps: fix cross-location visibility first, build genuine supplier-side transparency second, and only then layer in forecasting and automation. Skipping the sequence is exactly what leaves a lean, efficient business one bad week away from the clipboard-and-guesswork state M&S and Co-op found themselves in.

As monthly order volume increases, retailers need a system in place to track inventory in real time to meet customer demand and expectations around fast shipping. That's true whether you're managing 3 stores or 300. The scale changes. The underlying requirement doesn't.

Final Summary: Inventory Visibility and Supply Chain Resilience

Frequently Asked Questions About Inventory Visibility and Supply Chain Management

What is inventory visibility in supply chain management?

Inventory visibility is the ability to see, in real time, how much stock you have and where it is, across every store, warehouse, and channel in your retail supply chain. Full supply chain visibility goes further, extending that same real-time view upstream to suppliers and in-transit goods, not just the stock a retailer already holds.

Why is supply chain visibility important for UK retailers?

Poor inventory visibility contributes directly to the $1.73 trillion in global inventory distortion losses recorded annually by IHL Group. For UK retailers, supply chain visibility is what allows a business to fulfil orders from the nearest available location, avoid overordering, and keep replenishment accurate. Without it, retailers are effectively guessing at stock levels, which the M&S and Co-op cyberattacks showed can escalate into empty shelves within days once the underlying systems fail.

How much does poor inventory visibility cost a mid-market UK retailer?

Using IHL Group's benchmark of inventory distortion at roughly 6.5% of sales, a mid-market UK retailer turning over £10m could be losing around £650,000 a year to stockouts and overstocks combined. That figure typically shows up scattered across shrinkage, markdowns, and lost footfall conversion rather than as a single visible cost.

What causes poor supply chain visibility in retail?

72% of stockouts are caused by retailer-side issues rather than genuine supply chain disruption, most often disconnected systems between warehouse, store, and online channels, inconsistent stock counts, unresolved shrinkage, and a lack of real-time data sharing with suppliers. The Co-op and M&S cyberattacks are extreme examples of the same underlying weakness: a single system failure removing all visibility at once.

How can retailers improve inventory visibility and supply chain resilience?

The most effective sequence is to fix cross-location and cross-channel visibility first, since cross-location visibility alone can reduce customer-facing stockouts by up to 50%, then build genuine supplier-side transparency, and only then introduce AI-driven demand forecasting once the underlying data is trustworthy. Retailers that skip straight to forecasting technology without fixing base-level stock accuracy tend to get worse results, not better ones.

Is inventory visibility only a technology problem?

No. A meaningful share of poor inventory visibility comes from data quality and process discipline, not missing software. Shrinkage, inconsistent returns processing, and uncounted damaged stock all corrupt the underlying inventory record that any supply chain visibility system depends on, regardless of how advanced that system is.

What is the difference between inventory visibility and supply chain visibility?

Inventory visibility usually refers to a retailer's own stock, across its own stores, warehouses, and online channels. Supply chain visibility is broader, and includes visibility into supplier stock levels, in-transit shipments, and upstream disruption. A retailer can have excellent inventory visibility internally and still be exposed if it has poor supply chain visibility into its suppliers, as the M&S breach demonstrated when a third-party IT supplier became the point of failure.

Grow Your Business With Integrated Data and Operational Intelligence

This is the exact category of problem GrowSights was built to diagnose: not "which software should I buy," but "what does my data actually tell me about where my business is exposed." If you're a UK mid-market retailer trying to work out whether your inventory visibility is a genuine strength or a hidden liability, that's a conversation worth having before something forces it. Learn more about how we work and the kinds of mid-market retail brands we partner with, or read more of our thinking on where UK retail is heading next.

Start a conversation with GrowSights

Research sources: IHL Group inventory distortion research (2024/2025); GS1 UK, "Retail and e-commerce in 2026"; Think Logistics Hub, UK supply chain visibility research (2026); BRC-KPMG Retail Sales Monitor and BRC footfall data (2025/2026); Computer Weekly reporting on the M&S and Co-op cyberattacks; BlackFog and SupplyChain360 M&S incident timelines; The Record (Recorded Future News) and CyberProof reporting on the Co-op cyberattack; UK Cyber Monitoring Centre incident assessment; Aislestock/Extensiv stockout cost research (2026); Toolio planning-gap analysis.

Published by Growsights | Retail Intelligence and Growth Engineering | Point of View