Overview

• M&S reopened its website on June 10 with a limited selection of fashion items after cyber intruders forced a halt to online sales since late April.
• Standard home delivery is now available in England, Scotland and Wales, while deliveries to Northern Ireland and click-and-collect services are slated to return in the coming weeks.
• The retailer estimates the attack will shave roughly £300 million off its operating profit, about half of which it expects to recoup through insurance and cost controls.
• Hackers widely linked to Scattered Spider or DragonForce breached systems via a third-party contractor and stole customer names, addresses and order histories without accessing card or password data.
• Extended delivery times of up to 10 working days and sporadic stock shortages reflect M&S’s cautious, phased approach to restoring full online services.