Skip to content
City PM
  • Germany
  • France
  • Europe
  • Markets
  • Business
  • Opinion
  • Germany
  • France
  • Europe
  • Markets
  • Business
  • Opinion
Tuesday 01 July 2025 2:00 pm

M&S to be fully operational by August after heavy cyber attack, boss says

By: Amber Murray

Retail Reporter

Add as a preferred source on Google
The board unaminously agreed to extend Norman's position as Chair
M&S was among a number of household names that suffered cyber attack losses

Marks and Spencer boss Stuart Machin has said he expects the worst of the retailer’s cyber attack to be over within the next four weeks.

M&S has been struggling with the attack since April, with some systems still offline – including click and collect services.

The retailer’s share price climbed slightly in response, up 0.62 per cent on the day.

‘’Marks and Spencer is halfway there, but there’s still a lot to get back online before the company can put the cyber attack behind it,” Susannah Streeter, head of money and markets at Hargreaves Lansdown, said.

M&S has estimated the fallout from the cyber attack – thought to be related to the hacking group Scattered Spider – to cost £300m, although some of this will be mitigated by insurance claims and cost efficiencies made elsewhere.

The lack of online orders has “heavily impacted” trading profit, the company said, as have costs associated with reduced food availability and waste.

Last month, the company said that some its customers’ personal data was stolen in the attack, although it said the data does not include useable payment or card details, nor does it include account passwords.

Read more

The Debate: Should CEOs be held personally accountable for cyberattacks?

Evil-looking keyboard symbolizing cybersecurity threats and hacking risks in a digital landscape.

But Streeter said M&S has tried to use the situation to its advantage, taking the opportunity to “speed up part of its digital transformation plan, as well as ensuring that its IT systems are robust enough to withstand a future attack.”

M&S accelerate investment in stores

Despite the cyber hit, M&S plans to invest £300m in stores, with 16 new, 9 extended and 12 renewed stores opening this financial year.

“This year we are stepping up the pace of our programme and investing over £300m to rotate and renew stores across the country,” Machin said.

“We have a rigorous strategy to make sure we have the right stores in the right places, and this year we will deliver 37 new and renewed stores with the best of our Food, Fashion and Home and Beauty to our 32 million customers.” 

Early signs suggest that M&S is likely to be able to put this difficult chapter behind it, with “pent up demand, particularly for its summer styles, with many of the popular products sold out online,” Streeter said.


Read more

Jaguar Land Rover eyes cost-cutting and wealthy buyers in cyber attack recovery

JLR logo prominently displayed in an automotive business setting, highlighting the companys brand presence and identity

Share this article

  • Facebook
  • X
  • LinkedIn
  • WhatsApp
  • Email

Similarly tagged content:

Sections

  • News

Categories

  • Retail
  • Business

People & Organisations

  • cyber attack
  • Marks and Spencer
  • Retail
  • shops
  • Stuart Machin

Trending Articles

  • Revealed: Secret Treasury plan to tax State Pension before it is paid out

  • Two solicitors linked to Post Office scandal charged with misconduct

  • Burnham’s new chief of staff ran City firm advising Thames Water and rival Heathrow bidder

  • Barclays and Lloyds join banking sector plan for digital ID

  • Reeves’ new tax charge on cash ISAs faces fierce industry backlash

More from City PM

  • The Debate: Should CEOs be held personally accountable for cyberattacks?

    Opinion
    Evil-looking keyboard symbolizing cybersecurity threats and hacking risks in a digital landscape.
  • Jaguar Land Rover eyes cost-cutting and wealthy buyers in cyber attack recovery

    Retail
    JLR logo prominently displayed in an automotive business setting, highlighting the companys brand presence and identity
  • Gambit Cyber Launches Vizier AI – An Autonomous Security Intelligence Workspace for Continuous Exposure Management

    Business Wire
  • Professional services firms the ‘flavour of the month’ for cyberattacks

    Prof Services
    The ICO said it initially planned to fine Capita a total of £45m, but this was later reduced by “mitigating factors”
  • ‘Act now’: AI models capable of attacks on governments months away, Five Eyes warn

    Tech
    GettyImages 158774123 showcases a relevant business meeting scene, highlighting diverse professionals engaged in discussion.
  • Flying at Heathrow will cost ‘significantly more’ due to third runway bid

    Transport & Infrastructure
    Heathrow and several European airports are suffering from a cyber attack.
  • Matalan kicks off turnaround under new boss as retailer slashes jobs

    Retail
    Henrik Nordvall addressing a conference, wearing a suit, with a presentation screen in the background, engaging audience.
  • B&M poaches Asda exec in bid to shake off accounting blunder

    Retail
    Business meeting with diverse professionals discussing strategy around a conference table in a modern office setting

City PM — European politics, business and analysis.

Europe

  • Germany
  • France
  • Europe
  • UK & Ireland

Topics

  • Business
  • Markets
  • AI
  • Technology
  • Opinion
  • Energy

More

  • Politics
  • Economics
  • Fintech
  • Legal
  • Sport
  • Life

Company

  • About City PM
  • Contact
  • Terms of Use
  • Privacy Policy
  • Cookie Policy
© 2026 City PM. All rights reserved.
About · Contact · Terms · Privacy