United Kingdom
GBR
MARKS AND SPENCER pauses online orders amid cyberattack
On 25 Apr 2025, Marks & Spencer paused website and app orders while responding to a cyber incident that began earlier that week. The retailer reported disruptions to contactless payments and click‑and‑collect services and said some processes were taken offline while working with external experts to restore normal operations.
60
Estimated severity
60 / 100
93
Source reliability
93 / 100
Approximate Date
25/04/2025
Targeted Company
MARKS AND SPENCER
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United Kingdom
Affected countries
United Kingdom
Impacted regions
United Kingdom · United Kingdom
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOrder processing disruptionOperational disruption
Affected sectors
Retail
Affected departments
SalesInformation TechnologyCustomer Service
Attack Profile
Attack types
Unauthorized access
Attributed threat actors
No information
Sources
Incident Sources
bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/marks-and-spencer-pauses-online-orders-after-cyberattackcomputerweekly.comhttps://www.computerweekly.com/news/366623085/MS-suspends-all-online-sales-as-cyber-attack-worsenscyberinsider.comhttps://cyberinsider.com/marks-spencer-confirms-cyber-incident-causing-business-disruptiondailysecurityreview.comhttps://dailysecurityreview.com/security-spotlight/marks-spencer-halts-online-orders-following-cyberattack