M&S Bounces Back: Online Orders Resume After Cyberattack - What You Need to Know

UK retailer Marks & Spencer has taken a significant step forward in its recovery from a devastating cyberattack in April by reinstating online orders for select fashion ranges in England, Scotland, and Wales. This marks a pivotal moment 46 days after the attack forced a shutdown of its online services.

Limited Services Resume

• Standard shipping is now available, though delivery times have extended to up to 10 days, compared to the pre-attack 3-5 day window.
• Deliveries to Northern Ireland and army bases are still pending, with timelines stretching up to two weeks for the latter.
• Click & Collect, next-day delivery, and international ordering remain unavailable as the company works to fully restore services.

The Aftermath of the Attack

The cyberattack, strongly rumored to involve DragonForce ransomware, led to the theft of customer data and a projected £300 million ($404.7 million) operating profits loss for the next financial year. M&S is mitigating these losses through insurance claims and cost-cutting measures.

Financial and Market Impact

• The attack caused a 16% drop in M&S's share price at its lowest point, erasing over £1 billion ($1.3 billion) from its market valuation.
• News of the partial service restoration has spurred a 3% rise in share prices, signaling investor confidence in the retailer's recovery efforts.

Looking Ahead

CEO Stuart Machin views this challenge as an opportunity to accelerate digital transformation, with the company previously warning that full website recovery might extend into July.