Bonum Certa Men Certa

Sainsbury’s Epic Downtime Seems to be Microsoft's Fault and Might Even Constitute a Data Breach (Legal Liability)

posted by Roy Schestowitz on Mar 18, 2024,
updated Mar 18, 2024

Sainsburys logo

NEED we explore Windows Total Cost of Ownership (TCO) stories for Sainsbury’s, one of Britain's largest groceries (and far beyond) chains? Yes. Because it keeps happening and Sainsbury’s isn't learning a much-needed lesson. Sainsbury’s must dump Microsoft or risk reputation issues, if not legal issues too. Sainsbury’s has a lot of data about things that I bought almost as far back as the 1990s. It has similar data about millions of Brits. They have a considerable stake in what's happening.

Today we deal with this latest incident which shut down the online store of Sainsbury’s over the weekend. What exactly happened? It's not clear, but later I'll show the face-saving nonsense that the CEO sent everybody in their database, myself included..

A friend told me there will probably more information later, but I doubt it. They want people to forget and "move on" as soon as possible.

Looking at Sainsbury’s addresses like these, we find: "To access the site, please log in using your Sainsbury's or Sainsbury's Bank email address. Unable to access your account? Please click here. 2013 Microsoft."

Yes, notice Microsoft at bottom:

To access the site, please log in using your Sainsbury's or Sainsbury's Bank email address. Unable to access your account? Please click here. 2013 Microsoft.

Yes, in 2024 it says "2013 Microsoft." Sounds reassuring, right.

Digging a little deeper, we find pages like these about the love-fest of Microsoft and Sainsbury's. "No info about what is hosting their web app," an associate said, but it's revealing that they're deeply connected to Microsoft and maybe outsource a lot of their operations as well. They use Microsoft Teams and have in essence outsourced their communications to Microsoft/NSA/USA. Stay classy. They clearly don't grasp security and sovereignty. Look who's running the company.

However, in relation to the above (latest) incident, it should be noted that sainsburystoyou is another site and I used to use that ages ago, as far back as 20+ years ago (first time was around 2003 because they had sent out vouchers for early adoption). It was always very Microsoft-centric, but Microsoft is hiding behind proxies (Tata is Microsoft) and buzzwords like "modernization" (that's how they frame outsourcing to another country). In the "partnerplatform" subsite, the ai_session is rather telling. "This cookie name is associated with the Microsoft Application Insights software, which c ollects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique anonymous session identifier cookie."

Conclusion: almost certainly Windows all over the place, hence Microsoft TCO. Other large chains such as Asda and Tesco are the same, but that is perhaps a subject for another day. The UK has a Microsoft infestation crisis. It weakens us as a nation and it impedes technical literacy.

So no, it is now Russia's fault, it's not some networking issues, it seems to be Microsoft slopware breaking down yet again. Yet again.

Wait, again?

Yes, because it happened before and it was reported as a Windows data breach. As associate says that Sainsbury's is at fault here because it chose Microsoft. Being cynical, the associate said it obviously can't be the fault of Microsoft for decades of shoddy design and workmanship, nor the fault of the Microsofters shoehorning Microsoft products into production environments.

Let's just always blame "Russia" and "Putin". Just before a long weekend, preferably. So that journalists will not be around, hence nobody will fact-check the claims from Microsoft.

So has Sainsbury's blamed "Russia" yet? Has Microsoft? "They can't find any other topics to criticise Russia over," the associate joked, in reference to all sorts of things which distract from war crimes...

The downtime wasn't ignored or overlooked; it's in the media right now and it was in the media over the weekend, as early as Saturday (my wife had seen reports about this in BBC; of course they didn't investigate the actual cause and just relayed corporate statements instead; they simply believe whatever the nontechnical 'suits' at Sainsbury's tell them).

Yesterday (Sunday) Simon Roberts (CEO, Sainsbury's) mass-mailed everybody, including me:

Dear Roy,

I’m writing to update you on the technical issue that has affected our Groceries Online deliveries and some services in our stores this weekend.

Firstly, I want to apologise to you and every customer that has been affected by the issue and to thank you for your patience and for bearing with us. I really understand how important it is for everyone to be able to shop with us conveniently and easily, whenever and however you want to, and I am sorry if you have not received your usual service from Sainsbury’s this weekend.

I am pleased to confirm that all the affected systems are now back online. Our stores continue to be open as usual and in-store payment services, including contactless, are fully operational.

Our online ordering system is still working as normal and any customers whose Groceries Online order was not delivered can place a new order now for a delivery any time from tomorrow. We will automatically add a voucher to your online wallet in the next few days to apologise for the inconvenience.

Our contact centre teams are working very hard to do everything they can to help customers who have been affected by the issue and need further assistance. Thank you for bearing with us while we work to answer any specific questions you may have as soon as possible.

I would also like to thank all our colleagues who have worked so hard to resolve this issue and support our customers. I’m proud of the way all our team have stepped up to manage the unexpected challenges that we know so many of our customers have experienced this weekend.

On behalf of everyone here at Sainsbury’s, thank you for your patience and understanding and, as always, thank you for choosing to shop with us.

Notice how, in so many paragraphs, he did nothing to assure customers there was no data breach. Why not add such an important, even critical, clarification? They got cracked perhaps? Spinning this as mere "downtime"? Such a communication strategy would not be unprecedented.

Let's dive a little deeper. What are the known facts? We know Sainsbury’s got cracked in 2021; it was Kronos malware, but "notice the omission of Windows in Wikipedia," an associate said, "though it is Windows malware."

This new report suggests Windows was involved, but it is still rather vague: "due to an error with an overnight software update." That was days after Patch Tuesday. This one calls it "major tech failure".

Not a Microsoft failure? Did you check? Or did you issue a generic statement, parroting Sainsbury’s/Microsoft? Well, "tech" does not just fail. There are causes and there are brands behind different "tech".

This year there is "no technical information to speak of," quoting the associate, "but, again, Windows malware is not unprecedented" a rival (Tesco) "was also hit."

So, to paraphrase, what legal obligations are on companies to notify of breaches and ransomware? I've sent Sainsbury’s an E-mail to ask if there was a data breach.

"They moved to Akamai the other day," our associate notes, "probably as the result of the trouble, but are under the commercial load balancers, hiding the real service."

Do note that Microsoft uses Sainsbury's as a case study without outright saying that it is afflicted with Windows and it is clear that they run 'Netskop' too [1, 2, 3].

Albeit only circumstantial, something used to be here and the smoking gun is here. "I did not keep the reference," the associate noted, "but one of Microsoft "STEM advocates" has two degrees, neither of which are STEM."

If there was a data breach at Sainsbury’s, then customers must know. Was there ransomware too? That would make things even worse. Customers can be blackmailed next, without even knowing who's to blame.

I am going to phone them to ask about my account when they open the lines in a few minutes and I suggest others who are Sainsbury’s customers do the same. Here is the number (below); they really go out of their way to make it hard to find routes to an actual person. I had to click about 10 times and move between several pages. It's like "dark patterns" to discourage any real help, leaving customers struggling to help themselves.

Sainsbury’s phone line

Other Recent Techrights' Posts

Alyssa Rosenzweig's LibrePlanet Talk About Freeing the Apple GPU
Alyssa Rosenzweig is the graphics witch behind the reverse-engineered drivers for the Apple GPU. She previously led Panfrost, the free drivers for Arm Mali GPUs powering devices like the Pinebook Pro. She graduated in 2023 with a Computer Science degree from the University of Toronto and now writes free software full-time.
Links 30/06/2024: LLMs Under Fire and Dictatorship of the Old
Links for the day
[Meme] Walking Outside the Guardrails of the Walled Gardens Built by Monopolies
So-called "advertiser-unfriendly" material was never a problem for Wikileaks
This War Crime Footage, Nothing Political Per Se, Is What They Made Julian Assange Plead Guilty To (War Criminals Not Convicted, Only Those Who Expose Them)
Wikileaks' Julian Assange: Exposing the US Military Crimes
20 Years Passed, Let's Go Even Faster Now
We are hoping to bring more original stories
Windows Lost Almost 92% Market Share in Egypt
From over 99% to just over 7%
 
Destination 'Five Percent'
We reckon GNU/Linux can break the 5% barrier some time by the end of this year, even without counting Chromebooks
A Crisis of Online Journalism
Almost a week ago a journalist was forced to plead guilty for an act of journalism
Germany One of Many Countries Where Microsoft's Bing Lost Market Share After All That LLM Nonsense (Bing Chat and Further Rebrands/Renames)
openai.com traffic plunged 60% last month
Microsoft’s Latest Antitrust Scrutiny
4 new stories
Microsoft Layoffs, Mass Plagiarism, and More
outrage included
GNU/Linux Climbed 0.25% This Month (in statCounter)
Around midday on Tuesday we'll start seeing preliminary data for July
Ilya Gulko Introduces Pollyanna
"Pollyanna is a web framework that makes it easy to create your own libre social space, such as a social network or blog."
'FSFE': Underage Labour, GAFAM Fronting, and Identity Theft to Undermine the FSF's Current Fundraiser
looking to raise funds at the same time as the FSF
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, June 29, 2024
IRC logs for Saturday, June 29, 2024
Links 29/06/2024: Astronauts at Risk, Ukraine Updates
Links for the day
Fedora and Red Hat Leftovers
mostly redhat.com
Microsoft is Now Googlebombing or Spamming 'Open Source' and 'Linux' to Promote Proprietary Surveillance, Azure
Notice the title and the image, what's being promoted etc.
Seychelles: GNU/Linux Doing OK
Seychelles cannot be considered poor
Gemini Protocol Isn't Even Remotely "Dead"
"Lupa knows of 505,000 (half a million!) working Gemini URLs at present, up from about 425,000 this time last year"
About 10 New Free Software Foundation (FSF) Members Per Day
The total changed from 46 to 47 while typing the article
Vista 11 Adoption Unusually Low in Germany and It's Going Down, Not Up
This is not happening only in Germany
Kevin Korte on Computers Being Allowed to Make Decisions Based on Cryptic Algorithms and Proprietary/Secret Data
It uses buzzwords where none are needed
[Meme] Garbage In, Garbage Out (linuxsecurity.com)
It is neither Linux nor security, just chatbot-generated slop
Microsoft-Invaded CISA Spreads Anti-Free Software FUD (as If Proprietary Software Has No Memory Safety Issues), Brittany Day Uses Chatbots to Amplify and Permutate the Microsoft FUD
linuxsecurity.com became an anti-Linux spam site
Microsoft Laying Off Staff in an Act of Retaliation and Union-Busting
retaliatory layoffs at Microsoft
Gemini Links 29/06/2024: Content Drowning in 'Goo' and LLM Slop
Links for the day
In Ecuador, GNU/Linux Adoption Surged From Under 1% to Over 4% in About 3 Years
Not even counting Chromebooks
LibrePlanet: Cultivating Backups (of Recordings)
an appeal to recover some of these talks
Microsoft/Windows Machines Are Turned Off (or Windows Deleted/Decommissioned) in Web Servers, as the "Market Share" Collapse Continues
Taking full history into account, this is a decrease of over 90% in some cases
Corwin Brust Hosting Freedom: A Behind-the-scenes Tour With the GNU Savannah Hackers
"the "smiling faces" behind it."
Android at 90% or More in Chad
Windows below 2%
David Wilson: Cultivating a Welcoming Free Software Community That Lasts
"a feeling of shared ownership for all users."
Julian Assange Might Continue Wikileaks, But Certainly Not Yet (Recovery Time Needed)
And probably at a symbolic capacity only
Bringing in 12 Santas and Taking 13 Out (Old Interview With Julian Assange)
Julian Assange's life inside the Ecuadorian embassy
Neil Plotnick on GNU/Linux in the High School Classroom
uploaded to the LibrePlanet instance of MediaGoblin
Asia Appears to be Fastest to Adopt GNU/Linux
the home of a considerable majority of the world's population
Alexandre Oliva's LibrePlanet 2024 Talk About "Software Enshittification"
in spite of technical difficulties encountered while recording
What They Used to Do With Mono They Now Do With Systemd (Lower and Deeper Down Than Userspace)
Now we have a project started primarily by Red Hat (and managed by Microsoft GitHub, which is proprietary) being managed by Microsoft and primarily serving Microsoft and IBM
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, June 28, 2024
IRC logs for Friday, June 28, 2024
Links 28/06/2024: Kangaroo Courts and Patents Spam, EFF Still Fighting for CPC's TikTok (a Digital Weapon)
Links for the day
Links 28/06/2024: Overton window and Polarization
Links for the day
[Meme] In 50 Years...
Microsoft's Vista 11 will take 50 years to be fully adopted
Only About 1 in 8 Russian Windows Users is Using Vista 11
it looks like over the past 12 months Vista 11 hardly grew and it remains very low at around 12% of Windows usage in Russia
Links 28/06/2024: More Attacks on the Press, More Censorship in Russia
Links for the day
Gemini Links 28/06/2024: Christmas Prematurely, Self-hosting
Links for the day
IBM: So Long, Suckers. Your Free OS is Now Proprietary. Pay IBM or Else.
almost exactly a year after turning RHEL into proprietary software
Vista 11 is Doomed and Despite Lack of Adoption Microsoft Already Speaks of Vapourware ("12")
"Microsoft has pulled a Windows 11 update after users reported boot loops and startup failures."
ChromeOS Reaches Highest Share in Years at the World's Most Populous Nation, Windows Now at All-Time Low of 13%
We're talking about India today
[Video] "It Is Incredible That Julian Assange Survives"
There was a positive and mutual relationship between Wikileaks and Dr Jill Stein
Never Assume That Because the Law Exists the Powerful Will Follow the Law
Who's going to hold them accountable now?
Nearly a Month Has Passed and Nobody at the Debian Project Even Attempted to Explain What Seems Like Back-dooring of Debian (and Hundreds of Distros That Are Debian-Derived)
I can cynically guess that only matters when a user with a Chinese name does it
[Video] Julian Assange Explains Wikileaks' Logistics
predating indefinite detention
IBM Was Never the "Good Guy", Just a Self-Serving and Opportunistic Money- and Power-Hungry Monopolist, Living Off of Taxpayers' Money (Government Contracts)
The Nazi Party of Germany was its second-biggest client at one point and now it's looking to profit from the work of slaves
"I Hated Working at IBM. They Were the Most Unfriendly People."
Don't forget what Watson the son did to a poor woman on a plane
State of the News (and Depletion of Journalism Online, Not Just Offline)
Newspapers are not coming back and the Web is not coming back either
GNU/Linux Consolidates in North America
Android rising a lot this year, too
[Meme] More Monopolies Granted While Patent Examiners Die (Overworking for Less Compensation)
Work more; Get less
Staff Union of the EPO (SUEPO) is Taking the New Pension Scheme (NPS) to an International Tribunal (ILOAT)
SUEPO wants more EPO staff to participate in collective action
Stella Assange and the Legal Team Speak to the Media a Day After WikiLeaks Founder Julian Assange Arrives in Australia
Published yesterday by a number of mainstream publishers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, June 27, 2024
IRC logs for Thursday, June 27, 2024
RIP Daniel Bristot de Oliveira, Red Hat death
Reprinted with permission from Daniel Pocock