Despite a major cyberattack disrupting online and contactless services, Marks & Spencer has seen an 8% surge in food sales, outpacing the wider UK grocery sector and increasing its market share. Plans to expand food halls into former Homebase outlets near Waitrose stores signal a strategic push amid rising grocery inflation and sector competition.
Marks & Spencer (M&S) is successfully navigating a challenging landscape marked by a significant cyberattack, which has not deterred its appeal to middle-class grocery shoppers. In fact, food sales at the retailer surged in the wake of the incident, growing by an impressive 8% during the four weeks leading up to May 18—a figure that nearly doubles the growth rate of the broader grocery sector, which registered just over 4% during the same period. Analysts have deemed this performance "remarkably strong," suggesting that M&S is not only weathering the storm but actively extending its reach over competitors like Waitrose.
Despite the cyberattack, which surfaced on April 22, M&S's share of the UK grocery market rose by 20 basis points to 3.8%, signalling resilience even in the face of adversity. This incident, attributed to hackers leveraging vulnerabilities in third-party systems, temporarily disrupted its online and contactless payment services and caused significant logistical challenges. The company is anticipated to sustain losses of around £300 million due to increased costs associated with food supply disruptions and damaged customer trust. CEO Stuart Machin expressed confidence in the company’s recovery, stating, “We’ve been around for 140 years with lots of challenges. We survived that and we’ll survive this,” highlighting M&S's long-standing history of resilience.
As part of its strategy to bolster growth, M&S plans to expand its food business by converting 12 former Homebase outlets into larger food halls stocked with the entire M&S range. Many of these locations are strategically sited near affluent areas and in proximity to Waitrose supermarkets, intensifying the competition. The Godalming site is set to become M&S's largest food-only store, positioned directly across from a Waitrose, which could significantly shake up the local grocery market landscape.
In broader market terms, UK grocery inflation has risen to its highest level in 15 months, climbing by 4.1%. Factors contributing to this inflation include increased payroll taxes for supermarkets and wage hikes. This backdrop highlights the unusual strength of M&S's food business amid rising prices across the retail sector, which is likely affecting consumer behaviour as shoppers become more discerning about where to spend their money.
The fallout from the cyberattack remains significant, with the retailer expected to see operational disruptions continue until July. In recent weeks, M&S's stock has attempted to recover, though shares remain down by about 8.5% since the incident. Competition within the sector is intensifying, as rivals like Tesco and Sainsbury's also report rising sales figures, benefiting from M&S's online setbacks.
The cyberattack has also prompted M&S to reassess its cybersecurity measures. Incidents such as this highlight the vulnerabilities present in corporate infrastructure, particularly those exploited through human manipulation tactics like social engineering. Experts have noted that improving cybersecurity practices—notably integrating stringent identity verification measures and training for employees—will be critical to protecting company assets in the future.
While M&S is currently grappling with the financial ramifications of the cyber disruption, the commitment to resilience and a robust strategy focused on food sector expansion suggest a forward-looking stance. Despite challenges, the company is optimistic about maintaining its market position and delivering on its long-term strategic goals. As recovery efforts ramp up, M&S appears poised not only to withstand the immediate crises but potentially to emerge with a stronger brand presence in the grocery sector.
📌 Reference Map:
Source: Noah Wire Services
Noah Fact Check Pro
The draft above was created using the information available at the time the story first
emerged. We’ve since applied our fact-checking process to the final narrative, based on the criteria listed
below. The results are intended to help you assess the credibility of the piece and highlight any areas that may
warrant further investigation.
Freshness check
Score:
8
Notes:
The narrative presents recent developments, including a cyberattack on M&S and its impact on food sales. The earliest known publication date of similar content is April 21, 2025, when M&S first reported issues with contactless payments and click-and-collect services. ([aljazeera.com](https://www.aljazeera.com/news/2025/5/2/harrods-ms-hit-by-cyberattack-what-happened-whos-behind-it?utm_source=openai)) The report includes updated data, such as the 8% food sales growth during the four weeks leading up to May 18, 2025, and the projected £300 million loss due to the cyberattack. However, the inclusion of older material alongside these updates may affect the overall freshness score. Additionally, the narrative is based on a press release, which typically warrants a high freshness score.
Quotes check
Score:
7
Notes:
The narrative includes a direct quote from CEO Stuart Machin: 'We’ve been around for 140 years with lots of challenges. We survived that and we’ll survive this.' A search reveals that this quote was first used in a press release dated April 25, 2025. ([en.wikipedia.org](https://en.wikipedia.org/wiki/Marks_%26_Spencer?utm_source=openai)) The identical wording suggests potential reuse of content. No earlier instances of this exact quote were found, indicating it may be original or exclusive content.
Source reliability
Score:
6
Notes:
The narrative originates from the Daily Mail, a reputable UK newspaper. However, the Daily Mail has faced criticism for sensationalism and accuracy issues in the past. The report includes references to other reputable sources, such as Reuters and the Financial Times, which strengthens its reliability. Nonetheless, the Daily Mail's reputation introduces some uncertainty regarding the overall reliability of the narrative.
Plausability check
Score:
9
Notes:
The claims in the narrative are plausible and align with recent events. The cyberattack on M&S, attributed to the hacker group Scattered Spider, disrupted services including online clothing sales and contactless payments, with the company facing a potential £300 million hit to operating profits. ([ft.com](https://www.ft.com/content/c9bd0a6a-eedf-4c98-8e2d-8deffd851761?utm_source=openai)) The reported 8% growth in food sales during the four weeks leading up to May 18, 2025, is consistent with data from NielsenIQ. ([reuters.com](https://www.reuters.com/business/retail-consumer/ms-food-sales-show-resilience-despite-cyberattack-says-nielseniq-2025-05-29/?utm_source=openai)) The expansion plans, including converting 12 former Homebase outlets into larger food halls, are also plausible and align with M&S's strategic initiatives. The narrative's tone and language are consistent with typical corporate communications, further supporting its plausibility.
Overall assessment
Verdict (FAIL, OPEN, PASS): OPEN
Confidence (LOW, MEDIUM, HIGH): MEDIUM
Summary:
The narrative presents recent developments regarding M&S's resilience amid a cyberattack and its food sales performance. While the content includes updated data and references to reputable sources, the reliance on a press release and the Daily Mail's reputation introduce some uncertainty. The identical quote from CEO Stuart Machin suggests potential reuse of content. Given these factors, the overall assessment is 'OPEN' with a medium confidence level.