Marks & Spencer security incident history
Hacking, data breaches and other security incidents involving Marks & Spencer, with related coverage.
Incidents: 1 · Most recent
Marks & Spencer cyber-attack exposes customer data and disrupts trading
Impact: Customer data exposure and disruption to payments and online orders; estimated cost of £300 million
A cyber-attack in April 2025 disrupted contactless payments, online orders and click-and-collect services at Marks & Spencer, leading it to suspend online orders. In May, the company disclosed that customer data had been exposed and estimated the cost of the attack at £300 million. Its profit subsequently halved in the first half of 2025, while results published in November 2026 showed that profit had recovered following the cyber-attack.
Related reports: 113 · last report →