M&S resumes online orders after cyber-attack disruption

M&S resumes online orders after cyber-attack disruption

Marks & Spencer has reopened its website for online orders, six weeks after a cyber-attack forced the retailer to suspend digital services. Customers in England, Scotland, and Wales can now place orders for standard delivery, with click and collect, next-day and international delivery services set to resume in the coming weeks.

The retailer had halted online sales following a ransomware attack over the Easter weekend, reportedly by a group known as Scattered Spider. The disruption is expected to cost the company up to £300 million in profits, though insurance is anticipated to cover around half of that.

During the outage, customers could still shop in-store, but stock shortages and missed online sales led to significant revenue loss during a busy trading period. M&S also confirmed that some personal customer data was compromised. In response, the company is accelerating upgrades to its digital infrastructure to enhance cybersecurity and restore full service.