Overview

• Marks & Spencer confirmed a cyber incident affecting contactless payments and click & collect services, with disruptions beginning over the weekend.
• Contactless payments have been restored, but delays persist for click & collect orders, with customers advised to wait for confirmation emails before visiting stores.
• The company has engaged external cybersecurity experts and notified the National Cyber Security Centre and Information Commissioner’s Office as investigations continue.
• M&S assured customers and staff that no action is required at this time, with no evidence suggesting a data breach has occurred.
• Stores, website, and app remain operational, and the retailer has apologized for the inconvenience while emphasizing its commitment to resolving the issue.