M&S warns of £300m hacking crisis hit - and disruption could last months

Marks and Spencer (M&S) warned investors of a potential £300 million hit to trading profits due to a recent ransomware attack, with disruptions expected to last into July and online channels remaining partially down; the company attributed the attack to "human error." Despite a 22.2% rise in trading profits to £875.5m and increased dividends, M&S shares fell nearly 3.5% as the cyberattack overshadowed positive financial results, with analysts noting potential fines from the Information Commissioner's Office as an additional risk.

Analysis

Marks and Spencer (M&S) has issued a significant profit warning, anticipating a £300 million impact on trading profits for the 2025/26 financial year due to a sophisticated ransomware attack last month, attributed to "human error." This cyber incident has caused substantial operational disruption, with online channels remaining down for payments and full recovery not expected until July, impacting sales and incurring additional costs in waste, logistics, and stock management, particularly in the Food, Fashion, Home & Beauty divisions. Although M&S aims to mitigate this financial blow through cost management and potential insurance payouts, the company's stock market value has already declined by over one billion pounds since the incident was declared on April 22nd. The attack, believed to be orchestrated by the "Scattered Spider" group, also resulted in the theft of customer names and contact details, though payment information is reportedly secure. This negative development overshadowed the release of otherwise strong annual results for the year to March 29th, which saw trading profits reach a 15-year high of £875.5m (a 22.2% increase) and a 20% rise in the final dividend. Despite these positive underlying figures, M&S shares fell nearly 3.5% on the news. Further uncertainty looms from a potential fine by the Information Commissioner's Office (ICO) for the data breach, which could theoretically reach up to £552m (4% of its £13.8bn annual revenue). Chief Executive Stuart Machin has framed the incident as a temporary setback and an opportunity to accelerate technology transformation.

Key Decisions for Investors

• Investors should brace for continued short-term pressure on M&S's profitability and share price due to the direct costs and prolonged operational disruption stemming from the cyberattack, which currently overshadows strong underlying financial performance.
• Monitor closely the company's progress in restoring full online functionality, the timeline for realizing insurance payouts, and any developments regarding potential ICO investigations or fines, as these will be key determinants of the ultimate financial impact.
• Evaluate the current valuation considering the significant near-term headwinds against the company's pre-incident operational strength and management's ability to navigate the recovery and accelerate its technology transformation as pledged.