M&S' $400 million cyberattack upheaval to linger into July

In This Article:

By James Davey and Paul Sandle

LONDON (Reuters) -A "highly sophisticated and targeted" cyberattack will cost Marks & Spencer about 300 million pounds ($403 million) in lost operating profit, and disruption to online services is likely until July, the British retailer said on Wednesday.

The attack on one of the biggest names on the UK high street forced M&S to resort to pen and paper to move billions of pounds of fresh food, drinks and clothing after it switched off its automated stock systems.

That led to bare food shelves and frustrated customers.

A month on, M&S' large online clothing service remains offline, and the attack has wiped more than a billion pounds off its stock market value.

Chairman Archie Norman said the timing of the attack was unfortunate as M&S, which has been implementing a comprehensive turnaround plan since 2022, had been starting to show its full potential.

"But in business life, just as you think you're onto a good streak, events have a way of putting you on your backside," he said.

M&S, which has 65,000 staff and 565 stores, said the hack would cost about 300 million pounds in lost operating profit in its year to March 2026, although it hopes to halve that impact through insurance, cost control and other actions.

M&S reported 984.5 million pounds in operating profit in the year ended March 29.

The group said online sales and trading profit in its clothing, home and beauty division had been "heavily impacted" by the decision to suspend online shopping, though store sales had "remained resilient".

It said online disruption would continue throughout June and into July as it restarts systems and ramps up operations.

Chief Executive Stuart Machin told reporters he expected about 85% of clothing and home lines to be available online in a few weeks' time.

In food, M&S said it had been hit by reduced availability and higher waste and logistics costs. Food sales had recovered over the last week, however.

Shares in M&S were up 2%, paring losses since the attack to 9%.

"The cyberattack, whilst frustrating, is hopefully a one-off event and today’s update has allowed the market to draw a line under the potential costs," Ian Lance, fund manager at Redwheel, one of M&S' biggest investors, said.

The retailer's operating performance for the year 2024/25 was ahead of analysts' expectations, which Lance said was of more relevance to the company's intrinsic value, as it showed the transformation of the business continued to gather momentum.