Marks & Spencer Hit by Cyberattack, Stores and Online Operations Continue with Disruptions

Published on April 23, 2025
Written by:
Lore Apostol
Lore Apostol
Cybersecurity & Streaming Writer

Leading British retailer Marks & Spencer (M&S) has confirmed a cyberattack that has caused operational disruptions over the past few days. The incident has impacted certain services, including delays to the retailer’s Click and Collect order system.

Marks & Spencer disclosed the cyberattack via a statement on the London Stock Exchange, revealing that they have engaged external cybersecurity experts to assist in managing and investigating the breach. 

According to the company, proactive steps have been taken to secure their network and protect both customers and business operations. These measures included temporary operational changes, the specifics of which were not disclosed.

Although M&S did not provide details about the nature of the cyberattack, they confirmed that the issue has been reported to the National Cyber Security Centre (NCSC) and data protection supervisory authorities. 

One major disruption caused by the attack is the delay in the Click and Collect service.  The company has issued apologies to customers affected by service delays and assured them of efforts to resolve the situation promptly.

M&S sent emails to affected customers, apologizing for the inconvenience and emphasizing their commitment to restoring normal service soon. Customers have been advised to wait for confirmation emails before heading to stores to pick up their orders.

Source: troyhunt / X

For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: