FILE PHOTO: Pedestrians walk past the Marble Arch branch of British retailer Marks & Spencer Plc in central London, Britain, May 18, 2025. REUTERS/Carlos Jasso/File Photo
LONDON (Reuters) -British retailer Marks & Spencer has resumed taking click and collect orders for clothing after a nearly four-month hiatus following a cyber hack and data theft that impacted its earnings during the period, sending its shares higher.
The 141-year-old M&S stopped taking orders through its website and app for clothing and home deliveries and collection from stores on April 25, three days after disclosing it was managing a "cyber incident."
It gradually resumed taking online orders for delivery from June 10, but click and collect services, which allow customers to order items online and pick up in stores, had remained suspended.
M&S said on its website on Monday that "Click & Collect is back," and in an Instagram post, John Lyttle, M&S' managing director for fashion, home and beauty, said the retailer's full online delivery offers were restored across fashion, homeware and beauty products, including the returns of online orders to any M&S store.
Shares in M&S were up 2%, paring 2025 losses to 10%.
Investec analyst Kate Calvert said the reinstatement of click and collect "is the key 'back to normal' signal from a consumer perspective."
She does not expect the hack to impact M&S' long-term valuation or growth prospects.
In May, M&S forecast that the hacking of its systems would cost it about 300 million pounds ($404 million) in lost operating profit in its 2025/26 financial year, though it hoped to halve that impact through insurance and cost controls.
As part of its management of the hack and data theft, M&S took other systems offline. That reduced both clothing and food availability in stores, further denting sales.
Rivals, such as Next in clothing and Sainsbury's in food, have been beneficiaries.
M&S CEO Stuart Machin had told investors in early July the group would be over the worst of the fallout from the incident by August.
Chairman Archie Norman last month told lawmakers that M&S believed the ransomware attack was carried out by the hacker group DragonForce.
Also in July, UK police arrested four people as part of their investigation into the hack and other attacks on the Co-op and Harrods.
($1 = 0.7424 pounds)
(Reporting by James Davey; Editing by Jamie Freed, Saad Sayeed and Bernadette Baum)
