Bonum Certa Men Certa

Sainsbury’s Epic Downtime Seems to be Microsoft's Fault and Might Even Constitute a Data Breach (Legal Liability)

posted by Roy Schestowitz on Mar 18, 2024,
updated Mar 18, 2024

Sainsburys logo

NEED we explore Windows Total Cost of Ownership (TCO) stories for Sainsbury’s, one of Britain's largest groceries (and far beyond) chains? Yes. Because it keeps happening and Sainsbury’s isn't learning a much-needed lesson. Sainsbury’s must dump Microsoft or risk reputation issues, if not legal issues too. Sainsbury’s has a lot of data about things that I bought almost as far back as the 1990s. It has similar data about millions of Brits. They have a considerable stake in what's happening.

Today we deal with this latest incident which shut down the online store of Sainsbury’s over the weekend. What exactly happened? It's not clear, but later I'll show the face-saving nonsense that the CEO sent everybody in their database, myself included..

A friend told me there will probably more information later, but I doubt it. They want people to forget and "move on" as soon as possible.

Looking at Sainsbury’s addresses like these, we find: "To access the site, please log in using your Sainsbury's or Sainsbury's Bank email address. Unable to access your account? Please click here. 2013 Microsoft."

Yes, notice Microsoft at bottom:

To access the site, please log in using your Sainsbury's or Sainsbury's Bank email address. Unable to access your account? Please click here. 2013 Microsoft.

Yes, in 2024 it says "2013 Microsoft." Sounds reassuring, right.

Digging a little deeper, we find pages like these about the love-fest of Microsoft and Sainsbury's. "No info about what is hosting their web app," an associate said, but it's revealing that they're deeply connected to Microsoft and maybe outsource a lot of their operations as well. They use Microsoft Teams and have in essence outsourced their communications to Microsoft/NSA/USA. Stay classy. They clearly don't grasp security and sovereignty. Look who's running the company.

However, in relation to the above (latest) incident, it should be noted that sainsburystoyou is another site and I used to use that ages ago, as far back as 20+ years ago (first time was around 2003 because they had sent out vouchers for early adoption). It was always very Microsoft-centric, but Microsoft is hiding behind proxies (Tata is Microsoft) and buzzwords like "modernization" (that's how they frame outsourcing to another country). In the "partnerplatform" subsite, the ai_session is rather telling. "This cookie name is associated with the Microsoft Application Insights software, which c ollects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique anonymous session identifier cookie."

Conclusion: almost certainly Windows all over the place, hence Microsoft TCO. Other large chains such as Asda and Tesco are the same, but that is perhaps a subject for another day. The UK has a Microsoft infestation crisis. It weakens us as a nation and it impedes technical literacy.

So no, it is now Russia's fault, it's not some networking issues, it seems to be Microsoft slopware breaking down yet again. Yet again.

Wait, again?

Yes, because it happened before and it was reported as a Windows data breach. As associate says that Sainsbury's is at fault here because it chose Microsoft. Being cynical, the associate said it obviously can't be the fault of Microsoft for decades of shoddy design and workmanship, nor the fault of the Microsofters shoehorning Microsoft products into production environments.

Let's just always blame "Russia" and "Putin". Just before a long weekend, preferably. So that journalists will not be around, hence nobody will fact-check the claims from Microsoft.

So has Sainsbury's blamed "Russia" yet? Has Microsoft? "They can't find any other topics to criticise Russia over," the associate joked, in reference to all sorts of things which distract from war crimes...

The downtime wasn't ignored or overlooked; it's in the media right now and it was in the media over the weekend, as early as Saturday (my wife had seen reports about this in BBC; of course they didn't investigate the actual cause and just relayed corporate statements instead; they simply believe whatever the nontechnical 'suits' at Sainsbury's tell them).

Yesterday (Sunday) Simon Roberts (CEO, Sainsbury's) mass-mailed everybody, including me:

Dear Roy,

I’m writing to update you on the technical issue that has affected our Groceries Online deliveries and some services in our stores this weekend.

Firstly, I want to apologise to you and every customer that has been affected by the issue and to thank you for your patience and for bearing with us. I really understand how important it is for everyone to be able to shop with us conveniently and easily, whenever and however you want to, and I am sorry if you have not received your usual service from Sainsbury’s this weekend.

I am pleased to confirm that all the affected systems are now back online. Our stores continue to be open as usual and in-store payment services, including contactless, are fully operational.

Our online ordering system is still working as normal and any customers whose Groceries Online order was not delivered can place a new order now for a delivery any time from tomorrow. We will automatically add a voucher to your online wallet in the next few days to apologise for the inconvenience.

Our contact centre teams are working very hard to do everything they can to help customers who have been affected by the issue and need further assistance. Thank you for bearing with us while we work to answer any specific questions you may have as soon as possible.

I would also like to thank all our colleagues who have worked so hard to resolve this issue and support our customers. I’m proud of the way all our team have stepped up to manage the unexpected challenges that we know so many of our customers have experienced this weekend.

On behalf of everyone here at Sainsbury’s, thank you for your patience and understanding and, as always, thank you for choosing to shop with us.

Notice how, in so many paragraphs, he did nothing to assure customers there was no data breach. Why not add such an important, even critical, clarification? They got cracked perhaps? Spinning this as mere "downtime"? Such a communication strategy would not be unprecedented.

Let's dive a little deeper. What are the known facts? We know Sainsbury’s got cracked in 2021; it was Kronos malware, but "notice the omission of Windows in Wikipedia," an associate said, "though it is Windows malware."

This new report suggests Windows was involved, but it is still rather vague: "due to an error with an overnight software update." That was days after Patch Tuesday. This one calls it "major tech failure".

Not a Microsoft failure? Did you check? Or did you issue a generic statement, parroting Sainsbury’s/Microsoft? Well, "tech" does not just fail. There are causes and there are brands behind different "tech".

This year there is "no technical information to speak of," quoting the associate, "but, again, Windows malware is not unprecedented" a rival (Tesco) "was also hit."

So, to paraphrase, what legal obligations are on companies to notify of breaches and ransomware? I've sent Sainsbury’s an E-mail to ask if there was a data breach.

"They moved to Akamai the other day," our associate notes, "probably as the result of the trouble, but are under the commercial load balancers, hiding the real service."

Do note that Microsoft uses Sainsbury's as a case study without outright saying that it is afflicted with Windows and it is clear that they run 'Netskop' too [1, 2, 3].

Albeit only circumstantial, something used to be here and the smoking gun is here. "I did not keep the reference," the associate noted, "but one of Microsoft "STEM advocates" has two degrees, neither of which are STEM."

If there was a data breach at Sainsbury’s, then customers must know. Was there ransomware too? That would make things even worse. Customers can be blackmailed next, without even knowing who's to blame.

I am going to phone them to ask about my account when they open the lines in a few minutes and I suggest others who are Sainsbury’s customers do the same. Here is the number (below); they really go out of their way to make it hard to find routes to an actual person. I had to click about 10 times and move between several pages. It's like "dark patterns" to discourage any real help, leaving customers struggling to help themselves.

Sainsbury’s phone line

Other Recent Techrights' Posts

The Standard Needs to Improve Its Standards for Fact-Checking, Aaron Swartz Had Nothing to Do With Reddit and He Detested the Company That Created It
The Web is already bad enough as it is
New Paper From the EPO Highlights Large-Scale Discrimination at the Office, Where People Are Rewarded for Granting More and More Illegal Patents
Even the Kremlin is probably more competent than this
The Ultimate and Inevitable Fall of OpenAI (Even Brave is 'Bigger' Now)
"When you advertise at the Super Bowl, you’ve reached just about every consumer in America. It’s the last stop. If you’re not profitable yet, you never will be."
 
Soylent News Lessens the Scope of Discussion Due to Persistent Trolling and Online Abuse
if they make it a lot harder for new people to participate, then they limit the "general appeal" and reach
EPO's Local Occupational Health, Safety and Ergonomics Committee (LOHSEC) in The Hague: Workers Are Getting Sicker, Conditions in Which to Assess Patent Applications Deteriorate
"According to the Office statistics the total number of days of absence has gone up from 12.4 to 13.1 total number of sick days per Full Time Equivalent (FTE) from 2023 to 2024."
When the Livestream of Richard Stallman is Apparently Bury-Brigaded Offline You Finally Learn to Avoid Google/YouTube for Streaming
Please, people, stop uploading to Google/YouTube
Links 10/02/2025: Ban on D.E.I. Language, Listeria Risk/Outbreak
Links for the day
Links 10/02/2025: Announcing "Stringless" and Mental Health Improvement
Links for the day
Links 10/02/2025: Facebook Mass Layoffs, "Meta" Did What Aaron Swartz Had Done But to the Tune of 81.7 Terabytes
Links for the day
Microsoft Tarnishing the Brand of Arch
Of course Arch can do whatever it wants, but being associated with Microsoft is a badge of shame
Adding Slop to Your Blog Only Makes One Assume All the Text is LLM Slop
Simon Coter from Oracle has turned to slop
Macao is Leaving Microsoft Behind
Windows is falling to new all-time lows
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, February 09, 2025
IRC logs for Sunday, February 09, 2025
Microsoft's WSL (LSW) Shows That It Can Never Love Linux, Only Windows
that's just how Microsoft rolls
Activism in Times of War and a Coup
'Linux' Foundation works for fascism
What the Silencing of Neatnik Tells Us About Linus Torvalds Inside a Microsoft-Dominated 'Linux' Foundation
Is Linus Torvalds free to express his mind as he wishes about every topic, even just any technical topic?
Windows Down to 11.35% in Senegal, as Measured by statCounter
Another all-time low (Windows was at 99% in 2009)
"Latest Technology News" in BetaNews is LLM Slop Promoting OOXML and Proprietary Software at the Expense of LibreOffice and OpenDocument Format (ODF)
Remember that "open-source" and Open Source aren't the same; the former is fake
Links 09/02/2025: Coffee, Toxic Productivity, and Programming
Links for the day
Debian's Human Rights violations & Swiss women Nazi symbolism
Reprinted with permission from Daniel Pocock
Links 09/02/2025: Software Patents on MP3 and Another Scam Dressed Up as "Crypto"
Links for the day
Links 09/02/2025: Russian Energy Cut Off, LLM Pushers Show Signs of Desperation
Links for the day
Richard Stallman (RMS) Does Not Have Media Companies and Lobbyists on His Side, But His Message Spreads Regardless
The message of RMS is spreading in spite of all the smears
GNU/Linux Rises to All-Time High in Chile
sharp rise for GNU/Linux in Chile
Links 09/02/2025: Hottest January on Record, Panama Blackmailed
Links for the day
Why We Still Love Gemini Protocol
Gemini Protocol may seem like something "old" (it's actually very new) and something "nobody would use", but many people use it
Gemini Links 09/02/2025: "Died as a Mineral" and Game Interface for a Non-Game
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, February 08, 2025
IRC logs for Saturday, February 08, 2025
Links 08/02/2025: UK Back Doors and Religious Fundamentalists in Positions of Higher Power
Links for the day
Today's IBM (Red Hat) Isn't the Company That Fought a Microsoft-Sponsored SCO in Court
IBM is nowadays in a state of rapid disintegration
When You Simply Rebrand Almost Everything as "Hey Hi" ("AI"), "Hey Hi Workloads", "Hey Hi Datacentres" and Whatnot
The "growth" has been a growing lie for years if not decades
Microsoft Windows Falls to 12% in Myanmar
Remember that Microsoft is virtually 0% in mobile
This is the Man Who's Attacking Linus Torvalds et al in "a Disease" (Social Control Media)
One thing that Richard M. Stallman and Torvalds can agree on is that Social Control Media should be avoided
Gemini Links 08/02/2025: "Thought Leaders" and Returns to Gemini Protocol
Links for the day
Links 08/02/2025: MElon Coup, Mass Layoffs at Facebook, and PlayStation Network Down
Links for the day
Unlike GAFAM, Free Software Serves You, It Does Not Serve Governments and MElons (Overlapping Forces)
Tired of oligarchy controlling your life through gadgets and "apps"?
On Wars Against Founders
We need to insist that founders remain
When It Comes to Social Control Media, Linus Torvalds is Channeling Techrights
GAFAM workers know exactly who to aim at
New EPO Paper: Promoting (Rewarding) People Who Grant Many Illegal European Patents to Make More Money (at Europeans' Expense) While Patent Courts in the EU Are Themselves Illegal
now the coup is sort of complete and even the "courts" are part of the corruption
Slopwatch: Carnival of LLM Slop and FUD Spewed by Bots, Pasted in by MaKenna Hensley and Day
Welcome to the Web in 2025. Articles about "Linux", "Security", and the Web (e.g. "Firefox") are fake.
Links 08/02/2025: News Corp Admits Traffic Declines, Wildlife Trafficking Tackled
Links for the day
Gemini Links 08/02/2025: Lamp and Notions
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 07, 2025
IRC logs for Friday, February 07, 2025