Cyberattack Hits M&S: Online Orders Suspended, Shares Tumble

British retail giant Marks & Spencer (M&S) has halted all online orders across the UK and Ireland following a cybersecurity breach earlier this week, triggering a 5% drop in the company’s share price.

The iconic retailer — known for its premium food offerings and mid-to-high range clothing, homeware, and beauty products — confirmed the decision was part of a “proactive management” response to the incident. In a statement shared on X (formerly Twitter), M&S assured customers that its “experienced team — supported by leading cybersecurity experts — is working around the clock to restore online and app-based shopping services.”

While physical stores remain operational, the retailer acknowledged that some international online platforms have also paused orders. Reports surfaced earlier this week of disrupted contactless payments and delays in click & collect services, compounding customer frustration.

The breach comes at a significant time for M&S, whose online business accounts for roughly a third of its total clothing and homeware sales. Last year, the company reported an impressive £13 billion in total revenue.

The UK’s National Crime Agency (NCA) confirmed it is actively investigating the incident, working in coordination with the National Cyber Security Centre (NCSC) to support the retailer’s recovery efforts.