British retailer Marks & Spencer (M&S) has fully restored its in-store click-and-collect services nearly four months after a cyberattack disrupted its operations. The cyberattack, which occurred on April 22, 2025, also forced the company to halt contactless payments and pause online orders, causing widespread disruption. M&S had previously restarted online delivery orders on June 10, allowing customers to purchase the full range of items for home delivery. The cyberattack and subsequent data theft impacted the retailer's earnings during this period, with estimated costs around £300 million. The resumption of click-and-collect services marks a significant step in M&S's recovery, and the company’s shares rose following the announcement. Some services, however, remain unavailable as the retailer continues to address the aftermath of the breach.
