Marks & Spencer (M&S) has reopened its website for online orders after a crippling cyber-attack forced the retailer to suspend purchases in April.

The High Street chain announced that customers in England, Scotland, and Wales can now place orders for select fashion items, including clothing and footwear, with home delivery available.

Beauty and homeware products will be reintroduced in the coming days, while services to Northern Ireland and click-and-collect options are expected to resume “in the coming weeks.”

In a statement posted on LinkedIN, John Lyttle, M&S’s managing director, fashion, home & beauty, said that “more of our fashion, home and beauty products will be added every day and we will resume deliveries to Northern Ireland and Click and Collect in the coming weeks.”

The cyber-attack, which struck over the Easter weekend, initially disrupted M&S’s click-and-collect and contactless payment systems before escalating into a full shutdown of online sales.

The company warned that disruptions could persist until July, with the incident estimated to slash profits by £300 million – equivalent to a third of its annual earnings. While insurance may cover some losses, the financial impact remains severe.

Recommended reading

• Scattered Spider Linked to M&S Cyber-attack Chaos
• M&S Apologises To Customers Following ‘Cyber Incident’
• How Have Cyber Experts Reacted to the M&S ‘Incident’?

Hackers from the ransomware group DragonForce infiltrated M&S’s systems, stealing customer data including phone numbers, home addresses, and dates of birth.

The retailer confirmed that no usable payment details or passwords were compromised. Beyond this, the hackers reportedly sent a taunting email to CEO Stuart Machin on April 23, gloating about the breach and demanding payment.

The attack left shelves empty and deliveries in limbo, affecting a channel responsible for a large chunk of M&S’s clothing and home sales.

The breach, attributed to “human error” via a third party, underscores growing cybersecurity threats facing retailers, following recent attacks on brands like the North Face, Cartier, Co-op, Harrods, Adidas, and Victoria’s Secret.