Marks and Spencer’s website is currently down, leaving customers unable to browse or place online orders. This comes after a major cyber-attack last month, which has caused ongoing disruptions to the retailer’s digital services.
On Wednesday evening, users trying to access the website were greeted with a message saying the site was being updated and would be back soon. Unfortunately, this issue has lasted for weeks, affecting thousands of online shoppers.
Earlier in the day, M&S revealed the attack is expected to impact their yearly profits by around £300 million. The retailer warned that its online services will remain disrupted until July, as it works toward a gradual recovery.
Following the breach, M&S confirmed that some personal customer data was stolen. This may include details like phone numbers, home addresses, and dates of birth. However, the company has assured that no usable payment information or account passwords were accessed. Order history data might be part of the stolen information.
The cyber attack took place during the Easter weekend, first disrupting click-and-collect services and contactless payments. A few days later, a notice was posted on the site apologizing for the lack of online ordering options.
M&S said the attack was highly targeted and sophisticated. According to police sources, a well-known group of English-speaking hackers called Scattered Spider is suspected to be behind the breach. The same group has been linked to cyber attacks on the Co-op and Harrods, but M&S appears to have suffered the most severe damage.
This incident has not only caused inconvenience for customers but also led to a major financial setback for the retailer. Insurance may cover part of the loss, but the full recovery process could take time.
M&S continues to work on restoring full service while protecting customer data and ensuring better cyber security measures are in place.