**Marks & Spencer Reopens Online Shopping After Six-Week Hiatus Following Major Cyber Attack**


Marks & Spencer has announced the much-anticipated return of its online shopping platform, coming more than a month after a significant cyber security breach forced the retail giant to suspend digital orders. The disruption, which hit over the busy Easter weekend, left millions of loyal customers unable to purchase products online and prompted concerns about the safety of personal data.
The cyber attack caused widespread problems for both in-store and online shoppers. Customers reported issues with contactless payments, gift card transactions, and even the use of loyalty cards. Certain stores saw empty shelves and delays in replenishments, indicating the scale of the technical chaos unleashed by the breach.

The company later confirmed that sensitive customer data had been compromised. Information such as contact details and dates of birth was accessed by cyber attackers, sparking a wave of anxiety among shoppers and raising broader concerns about data security within the retail industry. While there was no mention of financial data theft, the incident placed a spotlight on the vulnerability of even the most established high street names.
In the weeks following the breach, Marks & Spencer worked to reinstate its in-store operations. However, online orders remained unavailable as the company conducted rigorous security checks and implemented enhanced protective measures. The restoration process has been gradual, with many speculating about when the popular digital service would return.
This week, M&S provided a glimmer of relief for its digitally savvy customers. John Lyttle, managing director of clothing, home and beauty, took to social media to confirm that online orders would be phased back in. Initially, only selected best-selling fashion items will be available for delivery to customers in England, Scotland, and Wales. Lyttle stated, “We are bringing back online shopping this week. A selection of our best-selling fashion ranges will be available for home delivery.”
He went on to add that additional ranges, including home and beauty products, would be gradually reintroduced. Plans are also in place to re-establish services to Northern Ireland and to reinstate the popular Click and Collect option over the coming weeks. Lyttle concluded, “Thank you sincerely for your support and for shopping with us during this challenging period.”
Financially, the fallout from the attack has been severe. At the release of its most recent financial results, Marks & Spencer estimated the cyber crisis is likely to cost the firm upwards of £300 million in operating profit for its 2025/26 financial year. Analysts note this figure highlights not just the direct impacts of lost sales, but also the long-term cost of rebuilding trust and reinforcing security systems.
The incident places Marks & Spencer among a growing list of major UK retailers targeted by cyber criminals, highlighting the evolving risks in an increasingly online retail environment. Security experts urge companies to prioritise investment in cyber resilience and to openly communicate with consumers about protective measures.
For shoppers, the return of M&S’s online platform marks a welcome restoration of convenience and choice. However, the aftermath of the attack is a reminder of the ongoing challenges that come with digital innovation, both for businesses and their customers.
As the retailer resumes full operations, questions remain about future security strategies and the steps M&S will take to prevent another such crisis. Nonetheless, for now, shoppers across the UK can look forward to once again filling their baskets with their favourite products—albeit with a sharper eye on digital safety.