Marks & Spencer Battles Back: Online Orders Resurrect Post-Cyberattack

By Dan Evert, CCNP   Published: 06/11/25   Updated: 10/20/26   3 min read

Marks & Spencer Battles Back: Online Orders Resurrect Post-Cyberattack

Key points

Online orders come back

Cyberattacks keep hitting big-name companies, and Marks & Spencer is now fighting one that took its online ordering platform offline. The retailer, known for selling everything from clothing to food, moved to bring some of its online operations back. It is an early but real step toward recovery.

The incident shows how persistent online threats are for businesses of every size, disrupting operations and shaking customer trust. M&S has kept serving customers through it. That says something about the company’s resilience.

What the attack disrupted

The attack badly disrupted M&S’s online operations, mainly customers’ ability to place orders. Details of the attack have not been disclosed. It fits a growing pattern of criminals using advanced techniques against major retailers.

The attack created operational problems and also tested how well the company could protect confidential customer data, a top concern at a time when a breach can do lasting damage to a brand and to customer trust.

Getting orders flowing again

M&S started recovery work right after the attack. It has restored part of its online ordering system, so customers can place orders again.

A Marks & Spencer spokesperson said the company is committed to resolving the situation and giving customers a smooth, reliable shopping experience. The quick action shows how hard the company is working to limit disruption.

What security experts recommend

Security specialists around the world keep warning about how threats are changing. Attacks are getting more sophisticated. Companies have to strengthen their defenses.

Specialists say scalable security tools and regular system audits are now a necessity. They help companies prevent and detect threats, and respond faster when one gets through.

The M&S attack shows why companies need careful security practices and close work with security experts to protect customer data and keep operations running.

What other retailers can learn

M&S’s quick response offers a lesson for retailers about preparing for intrusions. A strong security strategy is about more than defense. It keeps the business running and customers loyal in a crisis.

As M&S keeps reviewing and improving its security, the retail industry is watching closely. The fight against cybercrime does not end.

Retailers should improve their defenses now and write clear incident response plans, so they can recover quickly when an attack hits.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.