What: Marks and Spencer expects a return to profit growth after a significant cyber attack disrupted its operations and accelerated its strategic shift toward grocery and digital resilience.

Why it is important: This recovery highlights how robust crisis management and investment in digital resilience are now essential for retail profitability and customer trust.

Marks and Spencer is forecasting a return to profit growth following a major cyber attack that severely disrupted its operations and online sales. The incident, which resulted in a substantial financial setback, prompted the retailer to intensify its focus on both digital security and its long-term strategy to expand in the grocery sector. Leadership responded by accelerating store modernization and investing in technological resilience, ensuring that the business could recover quickly and maintain customer trust. The company’s approach demonstrates a commitment to omnichannel growth, balancing physical expansion with digital innovation. This episode underscores the increasing importance of cybersecurity and operational agility for legacy retailers, as the industry faces escalating digital threats and supply chain vulnerabilities. Marks and Spencer’s recovery serves as a benchmark for how established brands can adapt to crises, safeguard profitability, and reinforce their market position through strategic investment and decisive leadership.

IADS Notes: In November 2025, the Financial Times reported that Marks and Spencer suffered a £136mn profit hit and a seven-week suspension of online sales due to a cyber attack, highlighting the severe operational and financial risks posed by digital threats. By July 2025, Retail Week documented M&S’s accelerated store rotation programme and renewed focus on digital recovery, while Drapers in September 2025 detailed CEO Stuart Machin’s emphasis on digital resilience and supply chain innovation as part of the company’s recovery strategy. Sector-wide analyses from Retail Week in August 2025 and Inside Retail in June 2025 further confirmed that robust crisis management and integrated security strategies have become essential for maintaining competitiveness and customer trust in the retail industry.