Overview

• Marks & Spencer's website is back online for browsing after being taken down overnight for updates, though online orders remain suspended.
• The ransomware attack in April, attributed to human error via a third-party breach, is projected to cost the retailer £300 million in profits this year.
• Customer personal data, including names, addresses, and phone numbers, was stolen, but no usable payment details or passwords were compromised.
• The retailer has warned that full restoration of online services will be phased and is expected to continue into July to ensure system security.
• M&S is collaborating with cybersecurity firms and law enforcement while accelerating planned technology upgrades to strengthen its defenses.