M&S cyber attack halts online orders for weeks
A cyber attack attributed to Scattered Spider and DragonForce disrupted contactless payments and click-and-collect at M&S from 22 April, and the retailer paused all online orders from 25 April; online shopping did not fully return for around seven weeks.
- Service
- Marks & Spencer
- Date
- 22 April 2025
- Cause
- Cyberattack
- Duration
- Not stated or multi-day
- Status
- resolved
- Severity
- critical
- Region
- UK
- Source
- Computer Weekly ↗
Cite this
Nuffield Consulting, “M&S cyber attack halts online orders for weeks”, The Daily Tech Wire outage & breach log, 22 Apr 2025. https://techwire.nuffieldconsulting.com/incidents/2025-04-22-marks-spencer-outage/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: Computer Weekly, https://www.computerweekly.com/news/366623085/MS-suspends-all-online-sales-as-cyber-attack-worsens.
Related incidents
- 13 May 2025M&S confirms customer data taken in crippling cyberattackMarks & Spencer · breach · DragonForce / Scattered Spider
- 28 Apr 2025Iberian blackout cuts power and connectivity for millionsSpain and Portugal power grid · outage · Power / grid · 10 hours
- 30 Apr 2025Co-op shuts IT systems after attempted hackCo-op · outage · Cyberattack
- 25 Apr 2025Cyber attack hits Nova Scotia Power systemsNova Scotia Power · outage · Cyberattack
- 16 Apr 2025Zoom down for about two hours after domain blockedZoom · outage · DNS · 2 hours