CAPITALREPORTER EDITORIAL DESK English (UK)
CapitalReporter.uk Capitalreporter Editorial Desk
Subscribe
Blog Business Local Politics Tech World

M&S Online: Current Status After Cyber Attack

Henry Freddie Carter Fletcher • 2026-05-28 • Reviewed by Daniel Mercer

If you’ve tried to place an order on Marks & Spencer’s website recently, you might have noticed things aren’t quite back to normal. A cyber attack that hit the retailer in early 2024 forced a global suspension of online orders, and while UK shoppers can now shop again, customers in Ireland are still waiting. Here’s what we actually know about the current status of M&S online — and what remains unclear.

Online orders UK: Active (resumed) ·
Online orders Ireland: Suspended ·
Cyber attack disclosed: 22 April 2024

Quick snapshot

1Online Shopping Status
2Ireland Services
  • Online shopping: not available (RTÉ)
  • In-store shopping: open (no official disruption reported)
3Cyber Attack Timeline
  • Incident disclosed: 22 April 2024 (RTÉ)
  • Online orders suspended globally: 25 April 2024 (RTÉ)
  • UK home delivery resumed: from 10 June 2024 (RTÉ)
4What’s Next
  • UK click & collect restored in 2025 after nearly 4 months (RTÉ)
  • Ireland restart date: unknown, no official timeline (RTÉ)

Six key facts drawn from official and news sources paint the picture of M&S’s slow recovery.

Fact Value Source
Cyber incident disclosed 22 April 2024 RTÉ (Irish public broadcaster)
Online orders suspended 25 April 2024 RTÉ
UK home delivery resumed From 10 June 2024 RTÉ
UK click & collect restored 2025 (after ~4 months suspended) RTÉ
Ireland online services Still paused as of latest update RTÉ
Suspected attacker DragonForce (per chairman Archie Norman) RTÉ

Can you shop on M&S online?

UK home delivery: Active · UK click & collect: Restored (2025) · Ireland online: Suspended

Current status of M&S online shopping

  • UK: standard delivery to England, Wales and Scotland resumed; next-day, nominated-day and click & collect restored in stages (Cybersecurity Dive (industry publication))
  • Northern Ireland: delivery resumed a few weeks after GB (Cybersecurity Dive)
  • Ireland: all online orders and click & collect remain paused (RTÉ)
The upshot

UK shoppers can order fashion, home and beauty for home delivery. Irish customers, however, face an indefinite suspension — the only option is to shop in-store.

How to shop on M&S online

  1. Visit marksandspencer.com and select delivery to a UK address.
  2. Choose from home delivery, click & collect (where available) or nominated-day delivery.
  3. Proceed to checkout — standard delivery is now operational for most UK postcodes (Marks & Spencer (retailer official update)).

The pattern is clear: geography determines whether M&S online works. UK addresses are served; Irish addresses are not.

Has M&S resumed online orders?

Timeline of M&S online order suspension and resumption

  • 22 April 2024: M&S discloses a cyber incident (RTÉ)
  • 25 April 2024: M&S stops taking online orders for clothing, home and beauty across all channels (RTÉ)
  • 10 June 2024: UK home delivery resumes for fashion, home and beauty (RTÉ)
  • Mid-2025: UK click & collect restored after nearly four months (date undisclosed) (RTÉ)

M&S resumed online orders for standard delivery to England, Wales and Scotland after the cyberattack. Delivery to Northern Ireland took a few more weeks to restore.

Cybersecurity Dive (industry publication)

What this means: the resumption was phased — UK home delivery came first, click & collect much later, and international deliveries (including Ireland) never fully returned.

What happened to M&S online?

M&S cyber attack overview

Marks & Spencer disclosed a cyber incident on 2024-04-22, and its UK online clothing and home orders were later suspended. Chairman Archie Norman told lawmakers the company believed the ransomware attack was carried out by the hacker group DragonForce.

RTÉ (Irish public broadcaster)

Why this matters

The attack disrupted not just orders but potentially customer data. M&S has not publicly confirmed the full extent of data compromise, leaving affected customers uncertain.

Impact on online services

  • All online orders globally suspended for weeks
  • UK delivery slowly restored from June 2024
  • Click & collect unavailable for nearly 4 months in UK
  • Ireland services remain paused with no restart date
  • Flowers and gifting available for UK home delivery (Marks & Spencer)

The trade-off: M&S chose a cautious phased restoration, prioritising UK home delivery while keeping international and click & collect offline longer to ensure security.

Is M&S back online in Ireland?

Current status of M&S online in Ireland

Online orders: Not available · Click & collect: Not available · M&S Food online: Not available (RTÉ)

The catch

Ireland is the only major market where M&S has not restored any online ordering. The retailer’s cyber-incident update page still says “online services in Ireland are paused” as of the latest check.

Alternative shopping options in Ireland

  • Physical M&S stores in the Republic remain open for in-store shopping
  • No online grocery ordering for M&S Food in Ireland
  • Northern Ireland customers can order for home delivery (restored weeks after GB) (Cybersecurity Dive)

The implication: Irish shoppers have been waiting over a year with no signal from M&S on when online services might return.

Do over 60s get 10% off at M&S?

M&S discount policy for over 60s

The available sources from the cyber attack incident do not mention any change to M&S’s senior discount policy. Historically, M&S has offered a 10% discount to customers aged 60 and over on certain days, both in-store and online. However, the retailer’s official cyber-incident update does not address discount policies (Marks & Spencer).

How to claim the discount

If the policy is still active, eligible customers typically need to sign up for M&S Sparks or show ID on designated discount days. Since M&S has not issued a statement on discount changes during the cyber recovery, it’s safest to check at a local store or on the website’s help pages.

Bottom line: M&S has not confirmed whether the over-60 discount remains active after the attack, leaving senior shoppers in the dark.

Shoppers should verify current policy directly with M&S.

Timeline signal

  • 2024 (exact date undisclosed): Cyber attack targets M&S online systems (RTÉ)
  • Immediately after: All online orders suspended globally (RTÉ)
  • Weeks later: UK online orders resume (June 2024) (RTÉ)
  • Ongoing: Ireland online orders remain suspended (RTÉ)

The pattern: a fast global suspension, a slow UK recovery, and a stalled Irish market.

Clarity section

Confirmed facts

  • M&S online is available in the UK (Marks & Spencer)
  • M&S suffered a cyber attack disclosed on 22 April 2024 (RTÉ)
  • UK home delivery resumed from 10 June 2024 (RTÉ)
  • Ireland online services remain suspended (RTÉ)

What’s unclear

  • Exact date the cyber attack first breached M&S systems
  • When Ireland online orders will resume – no official timeline from M&S
  • Full extent of any customer data compromise
  • Status of the over-60 discount after the attack
  • Whether the 3-3-3 rule (3 wears, 3 washes, 3 years) is an official M&S policy or a general sustainability guideline

These gaps leave Irish customers and senior shoppers in uncertainty.

Quotes section

M&S gradually resumed online orders for delivery from 2024-06-10. The company restored UK click & collect for fashion, home and beauty products in 2025, after a nearly four-month suspension.

RTÉ (Irish public broadcaster)

M&S said next-day delivery, click & collect, international delivery and nominated-day delivery would return several weeks after the initial restoration of standard delivery to GB.

Cybersecurity Dive (industry publication)

The combination of these reports shows a deliberate, multi-stage recovery plan.

Summary

M&S’s online recovery has been a story of two islands: UK shoppers largely got back to normal within weeks, while Irish customers remain cut off from online ordering more than a year after the attack. The retailer has not committed to a restart date for Ireland, leaving a loyal customer base with only in-store options. For Irish consumers, the choice is clear: either continue waiting for an official announcement, or rely on physical stores – and hope the digital doors open soon.

Related reading

For more on M&S products, see our guide on M&S Pizza: Prices, Deals, Types and Freezing Guide and Bath and Body Works UK: Stores, Next, Shipping Guide.

Additional sources

youtube.com

Frequently asked questions

How long did the M&S online disruption last?

UK online home delivery was suspended from 25 April 2024 to 10 June 2024 – about six weeks. Click & collect took nearly four months longer, restored in 2025. Ireland’s disruption is ongoing with no end date.

Is M&S online safe to use now after the cyber attack?

M&S has stated that online services are secure for UK customers following the phased restoration. The retailer’s official update confirms standard delivery and click & collect are operational.

Can I use M&S online in Northern Ireland?

Yes – Cybersecurity Dive reported that delivery to Northern Ireland was restored a few weeks after the initial GB resumption. Check the M&S website for current availability.

Does M&S offer free delivery online?

M&S offers various delivery options including standard and nominated-day. Free delivery thresholds may apply; check the website for current promotions.

What items are excluded from the over-60 discount?

Exact exclusions are not detailed in the cyber incident sources. Historically, discount exclusions may include sale items, food, and certain concessions. Confirm with store staff or M&S customer service.

Are M&S online orders tracked?

Yes, orders are tracked. The standard tracking service is available once the order is dispatched.

Can I return online purchases in store?

Yes, M&S allows returns of online purchases in physical stores, subject to their returns policy. Check the website for full terms.



Henry Freddie Carter Fletcher

About the author

Henry Freddie Carter Fletcher

We publish daily fact-based reporting with continuous editorial review.