M&S click and collect finally returns months after cyberattack
M&S continues recovery from cyberattack as popular service restored
- Marks & Spencer has fully restored its Click & Collect service, nearly four months after a major cyberattack disrupted its online operations.
- The cyberattack, which began in late April, initially suspended all online ordering, contactless payments, and Click & Collect systems; online orders for home delivery resumed after six weeks, but Click & Collect was the last service to be reinstated.
- M&S estimates the incident will cost approximately £300 million in lost profits, though it expects to recover up to half through various measures, and personal customer data was also stolen.
- Hacking groups named DragonForce and Scattered Spider have been linked to the cyberattack.
- Archie Norman, M&S's chair, described the cyberattack as "traumatic" and an "out-of-body experience," highlighting the significant effort required by staff to manage the disruption.