Skip to content

Online operations for Marks & Spencer's online orders have been reinstated after a recent cyberattack.

International department store chains, includingone, fell victim six weeks ago to a spate of global assaults crippling retailers.

Online operations for Marks & Spencer's internet orders resume post cyberattack incident
Online operations for Marks & Spencer's internet orders resume post cyberattack incident

Online operations for Marks & Spencer's online orders have been reinstated after a recent cyberattack.

Marks & Spencer (M&S) has largely restored its delivery and collection services after a ransomware cyberattack in April 2025. The retail giant's Click & Collect service for clothing was fully reinstated by early August 2025, marking the final major system to be restored following the attack [3][4].

Delivery Services Update

Regarding the specific delivery services, there is no explicit update on the resumption of international deliveries. However, given the phased restoration of other online services by August, international deliveries are likely either resumed or imminently resuming as IT systems stabilize [3][4].

The full reinstatement of click-and-collect, which involves order processing and logistics, strongly suggests that next-day delivery for UK orders is either available or close to full restoration as of August 2025 [4]. Nominated-day delivery is likely either back or being phased back as part of the overall recovery, though no direct mention is made in the sources [3][4].

Delivery to Northern Ireland, however, will take a few more weeks.

M&S is facing legal action from a Scotland-based firm that specializes in data breach cases. In response to the cyberattack, M&S CEO Stuart Machin confirmed the company's aim for a full recovery by August 2025, consistent with reported service resumptions [3][4][5].

In the aftermath of the attack, M&S is accelerating plans to upgrade its technology platforms to ensure the company is more resilient in the face of future cyber risks. M&S will be adding additional inventory of fashion, home, and beauty every day [6].

Investigation and Cybersecurity Measures

The U.K. Information Commissioner's Office confirmed last month that it had received information about the attack from M&S and Co-Op Group. M&S is working with other U.K. authorities to determine what happened during the attacks [2].

Researchers at Google Threat Intelligence Group have linked the cyberattacks in the U.K. to a wave of incidents targeting U.S. retailers [8]. M&S has cyber-insurance coverage, but it is unclear just how much of the total financial impact would be covered by the plan [7].

John Lyttle, managing director of fashion, home, and beauty at M&S, announced the resumption of online shopping on LinkedIn [9]. A spokesperson for M&S was not immediately available for comment. No information about the nature or impact of the cyberattack on M&S's operations was provided in the paragraphs.

In recent weeks, companies including Victoria's Secret and United Natural Foods have disclosed cyber disruptions [10]. M&S is not alone in facing these challenges, underscoring the need for ongoing vigilance and investment in cybersecurity measures.

[1] - [10] are sources for the information provided in this article.

Read also:

Latest