Marks and Spencer (M&S) experienced a major cyber attack in April 2025, which caused significant disruption to their online services. The attack led to the website being taken offline for updates and recovery. As of now:

• The M&S website was back online for browsing since May 2025 but initially without the ability to place online orders.

• Online orders resumed in June 2025 for standard delivery in England, Scotland, and Wales, but some services including click and collect were still down.

• Click and collect services resumed fully again in early August 2025 after nearly four months of suspension.

• The company projected recovery and full online operational status by August 2025, with CEO Stuart Machin stating the majority of disruption would be behind them by then.

• However, some delays and stock availability issues continued post-attack.

In summary, Marks and Spencer is effectively back online with most online shopping features restored as of August 2025, including browsing, online ordering, and click and collect. Some limited disruptions and delays may still persist but the core services have resumed. Thus, M&S is back online now, with full recovery expected around August 2025.