Marks & Spencer has reopened its click-and-collect service for clothing, home and beauty products, completing the restoration of its e-commerce operations almost four months after a cyber hack forced the British retailer to take key systems offline. The company suspended contactless payments, online orders and in-store collections on 25 April, three days after it disclosed a “cyber incident”. Home-delivery orders were brought back on 10 June, but in-store pickup remained unavailable until 11 August. M&S has warned that the attack could cut about £300 million ($404 million) from operating profit in the 2025/26 financial year, though it aims to offset roughly half of the blow through insurance and cost controls. Investors welcomed the latest milestone, sending the shares up about 2% and trimming their year-to-date decline to 10%. Chief Executive Officer Stuart Machin told investors in July that the company expected to be past the worst of the disruption by August. The National Crime Agency arrested four people last month as part of its investigation into the ransomware assault, which the retailer believes was carried out by the group known as DragonForce.