M&S profit rebounds to £355m after a year of cyber attack fallout

Profit rebound after a year of disruption

Marks & Spencer disclosed that profit for the six months ending 26 September rose to £355m, a dramatic improvement from the £3.4m recorded in the same period a year earlier. The increase reflects a partial recovery from a cyber attack that crippled the online store for more than six weeks.

Key financial figures

According to the latest results, the retailer posted:

Profit before tax of £355m, up from £3.4m the previous year.
Revenue growth of 2.1% across the group.
Clothing and homeware sales still below pre‑attack levels, lagging two years behind.

The figures were released in a statement that emphasized the brand’s overall health despite the lingering impact on specific product categories.

Impact of the Easter 2025 cyber attack

The incident began in early April 2025, when malicious actors gained access to the retailer’s e‑commerce platform. The breach forced the company to shut down its website, which handles the majority of online clothing and homeware sales. The outage lasted for more than six weeks, during which customers were redirected to physical stores or third‑party marketplaces.

Website shutdown and sales fallout

During the downtime, online sales dropped sharply, creating a gap that was not fully closed even after the site reopened. Analysts noted that the loss of digital momentum affected summer clothing collections, a period that traditionally drives strong performance for the retailer.

Industry reports also highlighted the broader reputational damage that can follow such incidents, with consumers becoming more cautious about sharing personal data online.

Recovery steps taken by M&S

In the months following the attack, M&S launched a series of measures aimed at restoring confidence and strengthening its digital infrastructure.

Technology upgrades and customer outreach

The retailer invested in new security protocols, including multi‑factor authentication and advanced threat monitoring. It also worked with external cyber security firms to audit its systems and implement best practices recommended by the UK National Cyber Security Centre.

To reassure shoppers, M&S sent personalized communications explaining the steps taken to protect data. The company also offered a limited‑time discount on online purchases to encourage customers to return to the platform.

Enhanced encryption for payment processing.
Regular security training for staff.
Dedicated customer support line for breach‑related queries.

What the numbers say about brand health

Despite the lingering dip in clothing and homeware sales, the overall profit surge suggests that the core business remains resilient. Analysts point to strong performance in food and financial services divisions, which helped offset the shortfall in other areas.

Clothing and homeware performance

Sales in the clothing and homeware categories are still below the levels seen two years ago. The shortfall is attributed to:

Lost online momentum during the shutdown.
Reduced footfall in stores as shoppers shifted to competitors.
Continued consumer caution after the breach.

Nevertheless, the brand’s loyal customer base and its reputation for quality continue to drive steady traffic to physical locations.

Industry context and future outlook

Other UK retailers have faced similar cyber challenges in recent years. A report by the Financial Times noted an increase in ransomware attacks on large retail chains, underscoring the importance of robust digital defenses.

Comparisons with peer companies

When compared with rivals such as John Lewis and Next, M&S’s profit recovery is notable. While those companies also reported modest growth, none have shown a return to pre‑attack profit levels as quickly as M&S.

Looking ahead, the retailer plans to continue investing in its e‑commerce platform, with a focus on seamless omnichannel experiences. The goal is to align online and in‑store offerings, reducing the risk of future revenue gaps.

Overall, the latest results paint a picture of a brand that, despite a severe cyber incident, has managed to restore profitability and maintain consumer trust.