Marks & Spencer cyber-attack exposes customer data and disrupts trading
A cyber-attack in April 2025 disrupted contactless payments, online orders and click-and-collect services at Marks & Spencer, leading it to suspend online orders. In May, the company disclosed that customer data had been exposed and estimated the cost of the attack at £300 million. Its profit subsequently halved in the first half of 2025, while results published in November 2026 showed that profit had recovered following the cyber-attack.
Key facts
- Affected organisation
- Marks & Spencer
- Incident type
- Data breach
- Occurred / detected
- 2025-04-22
- Scale of damage
- Customer data exposure and disruption to payments and online orders; estimated cost of £300 million
- Cause / method
- Cyber-attack; the company identified human error as the cause
- Location
- United Kingdom
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The company apologised and said a cyber incident had disrupted contactless payments, online orders and click-and-collect services.
- The company suspended online orders in the aftermath of the cyber-attack.
- The company disclosed that customer data had been exposed in the cyber-attack.
- The company estimated the cost of the cyber-attack at £300 million and expected service disruption to continue until July.
- The company reported that its first-half profit had halved in the aftermath of the cyber-attack.
- Results showed that profit had recovered following the cyber-attack, but the recovery in the clothing division remained weak.
113 related reports
- M&S apologises after ‘cyber incident’ hits contactless payments and online orders | Marks & Spencer
- M&S says 'cyber incident' hitting click and collect orders
- Marks & Spencer confirms a cyberattack as customers face delayed orders
- Cyberattack Hits British Retailer Marks & Spencer
- Marks & Spencer Confirms a Cyberattack Hits Payments & Online Orders
- Marks & Spencer pauses online orders as firm struggles with cyber-attack fallout
- M&S cyberattack shuts down key services as retailer scrambles to recover
- Marks & Spencer breach linked to Scattered Spider ransomware attack
- M&S warehouse workers told not to come to work following cyberattack
- M&S tells hundreds of agency workers to stay home after cyberattack
- M&S tells agency workers to stay at home after cyberattack
- M&S pauses deliveries of some food items to Ocado after cyber-attack | Marks & Spencer
- M&S cyber-attack: when will orders be back, and is my data at risk? | Marks & Spencer
- Marks and Spencer’s pressured by ongoing cyber-attack
- M&S cyber-attack: the lessons for fashion retailers
- M&S resorts to pen and paper to honour Sparks loyalty rewards in crippling cyberattack
- Hundreds of East Midlands M&S agency workers told to stay home after cyberattack
- M&S cyber-attack linked to hacking group Scattered Spider | Marks & Spencer
- M&S unable to take on new workers as disruptions continue after cyber-attack
- Cyberattacks blight Britain's retailers as M&S, Co-op's systems' breached
- Scattered Spider: Who are the alleged hackers behind the M&S cyber attack?
- Scattered Spider: who are the hackers linked to M&S and Co-op cyberattacks?
- M&S online stock checker ‘not accurate’ thanks to cyberattack
- 英 유명 소매점 M&S 고객 정보 유출..사이버 공격 '비상'
- M&S Confirms Customer Data Stolen in Cyber-Attack
- Marks & Spencer confirms customers’ personal data was stolen in hack
- M&S says some personal data was taken in cyber-attack | Marks & Spencer
- M&S forces customer password resets after data breach
- Cyber experts issue urgent advice to M&S customers after data breach
- U.K. Retail Giant M&S Says Customer Data Was Compromised in Cyberattack (Published 2025)
- M&S says customer data stolen in cyberattack, forces password resets
- Will customers stay loyal after M&S cyber-attack?
- M&S customer data stolen in cyber attack
- M&S tells customers some data taken in cyber-attack
- M&S cyberattacks used a little-known but dangerous technique – and anyone could be vulnerable
- British retailer M&S reportedly set to claim £100 million from insurers after cyberattack
- Here's what we know about the DragonForce ransomware that hit Marks & Spencer
- M&S bosses under fire after ‘damaging and embarrassing’ cyberattack
- M&S cyber-attack: lessons on crisis management
- M&S hackers believed to have gained access through third party
- Privilege Under Fire: Protecting Forensic Reports in the Wake of a Data Breach
- M&S' slow recovery from cyberattack puts it at risk of lasting damage
- Lessons from the M&S cyberattack: how brands can survive digital catastrophe
- M&S chief Stuart Machin faces £1m pay cut after cyberattack
- The Pierce County libraries system was hacked, information stolen. What we know
- M&S cyberattack: how can retailers regain customers’ trust after a hack? A marketing expert explains
- M&S' $400 million cyberattack upheaval to linger into July
- M&S cyberattack to wipe out nearly one-third of annual profits
- UK retailer Marks & Spencer puts cyberattack cost at $400 million with disruptions ongoing
- M&S says it will respond to April cyberattack by accelerating digital transformation plans
- M&S expects cyber-attack to last into July and cost £300m in lost profits | Marks & Spencer
- British Retailer M&S Says Cyberattack Will Cost It $400 Million (Published 2025)
- M&S says cyberattack will hit profits by £300 million, disruption to last until July
- Marks & Spencer Says Cyberattack to Cost £300 Million
- UK retailer M&S puts cyberattack cost at $400m as disruptions continue
- Marks & Spencer faces $402 million profit hit after cyberattack
- M&S estimates £300m hit to operating profit from recent cyberattack
- M&S profits surged before crippling cyberattack and Ocado writedown
- The cyber-attack is costly and embarrassing. But M&S should pull through
- M&S hacking: Marks & Spencer faces over $400 million cyberattack bill, Online sales hit until July
- M&S cyber-attack disruption to last until July and cost £300m
- M&S hack attack will have tech firms ringing up the profits
- M&S says cyber hackers broke in through third-party contractor
- Marks & Spencer Expects Ransomware Attack to Cost $400 Million
- M&S website goes down - hours after financial impact of ransomware attack revealed
- M&S accelerates digital transformation after £300 million cyberattack, blaming “human error”
- Indian IT giant investigates M&S cyber-attack link
- M&S contractor ‘investigating whether it was gateway for cyber-attack’ | Marks & Spencer
- The company that may have been the gateway to £300m M&S hack
- Coca-Cola’s internal data just leaked: here’s what we know
- M&S food sales show resilience despite cyberattack, says NielsenIQ
- M&S boss received 39% pay hike in 2024/25 before cyberattack
- M&S boss’s pay package soared to £7.1m weeks before cyber-attack
- M&S stores staging walk-in recruitment open days amid cyberattack disruption
- M&S faces 'unprecedented' customer lawsuit over cyberattack data breach | ITV News
- M&S stores hold walk-in recruitment days following cyberattack
- “Catastrophic” data breach at M&S triggers collective proceedings
- M&S CEO contacted directly by hackers in ransom demand
- M&S hackers sent abuse and ransom demand directly to CEO
- After 46-day cyberattack pause, M&S resumes online orders
- M&S back in business following computer hack
- India's TCS says none of its systems were compromised in M&S hack
- Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages
- TCS clears its name in M&S data breach
- The financial impact of Marks & Spencer and Co-op cyberattacks could reach £440M
- M&S fashion rivals ‘benefited from its pause on online orders after cyber-attack’ | Marks & Spencer
- M&S' food sales growth slows after cyberattack, says NielsenIQ
- M&S will be over the worst of cyberattack impact by August, says CEO
- M&S CEO: Most of cyberattack impact will be behind us by August
- How M&S responds to its cyber-attack could have a serious impact on its future – and its customers
- M&S reinstates Sparks loyalty scheme after cyber-attack
- Britain's M&S restores click and collect services 15 weeks after systems hacked
- A cyber-attack isn’t enough to halt Marks and Spencer’s turnaround
- M&S digital chief exits months after damaging hack
- TCS denies cyberattack link as Marks & Spencer ends IT service desk contract - People Matters
- Tata Consultancy Services Refutes Losing M&S Contract After Cyber-Attack
- Tata Consultancy Services has denied a Telegraph report linking it to a £300 million cyberattack on Marks and Spencer (M&S), calling the article “misleading” and “factually inaccurate.” In an exchange filing, TCS clarified that M&S’s service desk contract ende
- M&S ends service contract with TCS after £300m cyberattack
- TCS denies losing UK’s Marks & Spencer contract over £300 million cyberattack
- TCS denies report on losing $1 billion M&S contract over cyberattack, calls claims misleading
- 'Misleading': TCS clarifies on '£300m cyberattack failures' report; stock reacts
- M&S forecasts rebound after cyber hack halves first half profit
- 막스앤스펜서, 최근 해킹 사고로 2300억원 손실
- M&S First-Half Profit Hammered by Impact of Cyber Hack
- M&S profits almost wiped out after cyber hack left shelves empty
- M&S Accelerates Turnaround Plan to Aid Recovery from Cyberattack
- M&S Christmas food sales soar but clothing suffers from cyber-attack fallout | Marks & Spencer
- M&S and Co-op targeted by claims firms over cyberattack ‘lost data’
- M&S profit rebounds from cyberattack but clothing drags on recovery
- M&S recovers from cyberattack but fashion still has work to do - FashionNetwork
- M&S profits beat forecasts as food sales offset cyberattack fallout
- M&S Grocery Sales Bounce Back After Last Year’s Cyberattack
- 今年最高金额！零售巨头因网络攻击损失近20亿元
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.