Marks & Spencer updates cyber recovery

Marks & Spencer is due to publish full-year results on May 20, giving investors its next formal update on recovery from the cyber incident that disrupted trading and customer services over the past year. The retailer’s financial calendar lists the results date for Wednesday, and recent coverage has pointed to heavy scrutiny of the company’s recovery plan and profit trajectory. The incident has already shown up in reported numbers. Marks & Spencer said in its half-year results on Nov. 5, 2025 that adjusted pretax profit for the 26 weeks ended Sept. 27 fell to 184.1 million pounds from 413.1 million pounds a year earlier, reflecting what it called the one-off impact of the cyber incident, partly offset by 100 million pounds of insurance proceeds. (corporate.marksandspencer.com) ### When did the disruption start affecting the business? Marks & Spencer said in a corporate update published about a year ago that it had paused taking orders through its M&S.com websites and apps as part of its response to the cyber incident. The company said stores remained open and customers could continue browsing products online while ordering was suspended. (corporate.marksandspencer.com) The company later said the disruption required operational changes to protect customers and the business. In a more recent customer update still live on its help pages, M&S said fashion, home and beauty home delivery in the UK had resumed, flowers and gifting were available for home delivery in England, Scotland and Wales, and Click & Collect was available for online orders. (corporate.marksandspencer.com) ### What has M&S said about customer data? Jayne Wall, M&S operations director, said in the company’s cyber update that some personal customer data had been taken. The company said the data could include contact details, date of birth, online order history, household information and masked payment card details used for online purchases. (corporate.marksandspencer.com) M&S said there was no evidence the data had been shared and said the information did not include usable card or payment details or account passwords. The company told customers they did not need to take action, but warned them to be cautious about emails, calls or texts claiming to be from M&S. ### What numbers will investors focus on next week? (corporate.marksandspencer.com) The most recent official benchmark is the first-half profit decline disclosed in November. M&S said adjusted pretax profit fell by 229.0 million pounds year on year, while statutory pretax profit was 3.4 million pounds and incident-related adjusting items totaled 167.8 million pounds. (corporate.marksandspencer.com) The Independent reported on May 15 that analysts were expecting roughly a 25% year-on-year decline in pretax profit when the retailer reports next week. That expectation was published ahead of the company’s own announcement and reflects analyst forecasts cited by the newspaper, not guidance from M&S. (corporate.marksandspencer.com) ### What will the company need to show on May 20? The May 20 results will be the next scheduled point for Marks & Spencer to set out recovery progress in a formal shareholder update. The company’s investor site lists full-year results for that date, and its results archive shows the prior full-year release was published on May 21, 2025. (independent.co.uk) Investors will be able to compare the new figures with the 2024/25 full-year baseline shown on M&S’s investor page, which lists group revenue of 13.9 billion pounds, group profit before tax and adjusting items of 875.5 million pounds, and group profit before tax of 511.8 million pounds. Those figures are currently the latest full-year numbers displayed by the company ahead of Wednesday’s release. (corporate.marksandspencer.com) On May 20, Marks & Spencer is scheduled to post its full-year results through its investor relations pages, where the company also hosts reports, presentations and webcasts for shareholders. (corporate.marksandspencer.com 1) (corporate.marksandspencer.com 2)