Skip to content
M&S Profits Recover Amid Ongoing Cyber Attack Fallout

M&S Profits Recover Amid Ongoing Cyber Attack Fallout

First seen 4 Nov 2026, 08:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 08:51 UTC
  • •M&S profits more than doubled post-cyber attack recovery.
  • •The cyber attack disrupted online sales and logistics for about six weeks.
  • •Some customer data was stolen, prompting security warnings for customers.

Marks & Spencer (M&S) has reported a significant recovery in profits following a cyber attack that disrupted its operations last year. The attack, which occurred around Easter 2025, forced M&S to halt online sales for approximately six weeks and caused supply chain disruptions, leading to empty shelves in stores. The retailer's adjusted pre-tax profits rose to £403.2 million for the 26 weeks ending September 26, 2026, compared to £184.1 million the previous year. However, the company warned of ongoing cost pressures, including £35 million in increased operational costs. Despite the recovery, the fashion and beauty segments have not fully bounced back, still feeling the effects of the cyber incident. M&S has resumed some online orders but continues to advise customers to be cautious of potential phishing attempts following the theft of some customer data during the attack.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2025-04-01
Cyber attack disrupts M&S operations
M&S halted online sales for about six weeks due to a cyber attack that affected logistics and in-store availability.
BBC
2025-06-10
Limited online orders resume
M&S announced a small selection of fashion products available online for delivery, with full service expected by July.
BBC
2026-11-03
M&S reports profit recovery
M&S reported adjusted pre-tax profits of £403.2 million, highlighting recovery from the cyber attack despite ongoing cost challenges.
Oxfordmail

More articles in this cluster (2)

Following this threat?

Track Marks & Spencer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What specific data was stolen during the attack?
M&S reported that some personal customer data, including names, addresses, and phone numbers, was stolen, but payment details were not compromised.
How long did M&S halt online sales?
M&S paused online sales for approximately six weeks due to the cyber attack that occurred around Easter 2025.
What are the ongoing impacts of the cyber attack?
The attack has led to long-term disruptions in product availability, particularly in the fashion and beauty segments, affecting sales performance.