- Cyberattack costs projected at $400 million.
- Online sales impacted; recovery planned for July.
- Company aims to mitigate losses through insurance.
Market reaction & context
Marks & Spencer’s shares dropped approximately 4% in early trading following the announcement, reflecting investor concerns amidst a broader recovery in the UK retail sector. The financial hit, which equates to roughly two-thirds of pre-attack profits, underscores significant operational risks faced by major retailers^1.
Detailed analysis
The cyberattack, described as “highly sophisticated and targeted,” forced M&S to suspend online shopping since April 25. The disruption has led to empty store shelves and increased logistics costs, particularly in its food division. This incident severely affected the retailer’s ability to process online orders, which generate over £3 million daily^2.
CEO Stuart Machin emphasized that the attack was traced back to human error involving third-party contractor systems. “This isn’t a weakness in our IT systems; it shows how vigilant we must remain against emerging cyber threats,” he said^3. The company will leverage insurance and cost-cutting measures to reduce the projected financial impact, aiming to mitigate the total loss to approximately £150 million.
Outlook / management quote
Despite the setback, Machin expressed confidence in M&S’s recovery strategy, stating, “This incident is a bump in the road, and we will come out of this in better shape.” The company is accelerating technological upgrades, with plans to complete them in a fraction of the originally planned timeline.^4
Conclusion
As M&S navigates the ongoing effects of the cyberattack and strives to restore normal operations, the incident highlights the increasing challenges retailers face in safeguarding critical data and operational integrity. The company’s proactive response will be crucial in regaining consumer trust and stabilizing sales moving forward.
Not investment advice. For informational purposes only.
References
1 UK retailer Marks & Spencer puts cyberattack cost at $400 million. AP News. Retrieved May 21, 2025.
2 Britain’s M&S says cyberattack to cost $400 million. Reuters. Retrieved May 21, 2025.
3 Marks & Spencer expects cyber-attack to last into July. The Guardian. Retrieved May 21, 2025.
4 Marks & Spencer Says Cyberattack to Cost $403 Million. Claims Journal. Retrieved May 21, 2025.