Marks & Spencer security incident history
Hacking, data breaches and other security incidents involving Marks & Spencer, with related coverage.
Incidents: 1 · Most recent
Marks & Spencer cyberattack exposes customer data and disrupts operations
Impact: Customer data exposure and disruptions to payments and online orders; estimated cost of £300 million
An April 2025 cyberattack disrupted contactless payments, online orders, and in-store collection at Marks & Spencer, prompting it to stop accepting online orders. In May, the company disclosed that customer data had been exposed and estimated the cost of the attack at £300 million. Its profit subsequently halved in the first half of 2025, while results released in November 2026 showed that profit had recovered following the cyberattack.
Related reports: 113 · last report →