Marks & Spencer cyber incident causes contactless payment chaos and online order issues

The contactless payment chaos customers encountered this week was as a result of a , it is understood.

The retailler has apologised for the disruption, which left or process click-and-collect orders across several of its UK stores. Customers vented their anger on social media, including X, as employees asked guests to pay with cash.

In a statement to the stock exchange, has now said it has had to make "minor, temporary changes" to its operations following the cyber incident. It added: "Marks and Spencer Group plc (the Company, or M&S) has been managing a cyber incident over the past few days.

"As soon as we became aware of the incident, it was necessary to make some minor, temporary changes to our store operations to protect customers and the business and we are sorry for any inconvenience experienced. Importantly, our stores remain open and our website and app are operating as normal."

Are you affected by the M&S cyber incident? Contact webnews@mirror.co.uk

READ MORE:

The statement continued: "The company has engaged external cyber security experts to assist with investigating and managing the incident. We are taking actions to further protect our network and ensure we can continue to maintain customer service.

"In parallel, the company has reported the incident to the relevant data protection supervisory authorities and the National Cyber Security Centre. Customer trust is incredibly important to us, and if the situation changes an update will be provided as appropriate. M&S' financial year ended on 29 March 2025, with full year results scheduled to be announced on May 21, 2025."

READ MORE:

The firm said customers and staff do not need to take any action, suggesting their data has not been accessed. However, shoppers were more angry about the lack of communication and their struggle to pay for items on Monday and, in some cases, on Tuesday as well.

A shopper at the retailer’s Plymouth store posted on X on Saturday that they "could not collect my online purchase today, previous visit could not return an item as tills were down …please sort out your poor IT situation". Another customer posted on the same platform on Monday: "Nothing working Beckenham [in] London either, no pick ups or returns."

In recent years, there has been a run of similar incidents, including the cyber attack Transport for London (TfL) encountered. During this episode, .

And In 2023, to overseas destinations after a cyber incident caused “severe service disruption” to international mail.