Marks & Spencer has reinstated its click and collect service for clothing, ending a 15-week suspension triggered by a major cyberattack and data breach.
The 141-year-old retailer halted online clothing and home orders for both delivery and store collection on April 25, shortly after revealing it was dealing with a “cyber incident.” While home delivery orders resumed on June 10, click and collect remained unavailable until now.
On Monday, the M\&S website confirmed the service was back online. The company has not yet issued a public statement.
In May, M\&S estimated the cyberattack would cost around £300 million (\$404 million) in lost operating profit for the 2025/26 financial year. It hopes to reduce the impact by half through insurance claims and cost-saving measures.
The incident forced M\&S to take additional systems offline, affecting product availability in both clothing and food categories. Competitors such as Next and Sainsbury’s have gained from the disruption.
CEO Stuart Machin told investors in July that the business would be past the worst effects by August. M\&S shares have fallen 12% so far this year. Photo by jaydeep_, Wikimedia commons.