Headlines
After 46-day cyberattack pause, M&S resumes online orders
Published by Global Banking & Finance Review®
Posted on June 10, 2025
2 min readLast updated: January 23, 2026
Global Banking & Finance Review®
Company
Published by Global Banking & Finance Review®
Posted on June 10, 2025
2 min readLast updated: January 23, 2026
Marks & Spencer resumes online orders after a 46-day cyberattack pause, boosting shares by 3%. Delivery services will gradually expand.
By James Davey and Paul Sandle
LONDON (Reuters) - British retailer Marks & Spencer resumed taking online orders for clothing lines on Tuesday after a 46-day hiatus following a cyberattack.
Shares in M&S, one of the best-known names in British business, were up 3% after it restarted standard home delivery in England, Scotland and Wales for the majority of its clothing range.
"It's not the full range at the moment, we've focused on best sellers and newness," an M&S spokesperson said.
"We'll be bringing product online everyday so customers will see that grow over the coming days."
M&S said delivery to Northern Ireland will resume in the "coming weeks", as will click and collect services, next-day delivery, nominated-day delivery and international ordering.
The 141-year-old M&S stopped taking clothing and home orders through its website and app on April 25 following problems with contactless pay and click and collect services over the Easter holiday weekend.
It first disclosed it had been managing a "cyber incident" on April 22.
M&S said last month it expected online disruption to continue into July and forecast the attack would cost it about 300 million pounds ($404 million) in lost operating profit in its 2025/26 financial year, though it hopes to halve the impact through insurance and cost control.
The group said hackers broke into its systems by tricking employees at a third-party contractor, skirting its digital defences to launch a cyberattack.
($1 = 0.7429 pounds)
(Reporting by James Davey and Paul Sandle; editing by Barbara Lewis)
M&S stopped taking clothing and home orders on April 25 following issues with contactless pay and click and collect services.
The suspension was due to a cyberattack that M&S first disclosed on April 22.
M&S forecasts that the cyberattack will cost it about 300 million pounds ($404 million) in lost operating profit.
M&S plans to resume delivery to Northern Ireland, click and collect services, next-day delivery, nominated-day delivery, and international ordering.
Shares in M&S were up 3% after the company restarted standard home delivery for the majority of its clothing range.
Explore more articles in the Headlines category
