M&S Posted a 24% Profit Drop and Doubled Down on Value. The Cyber Hit Did Not Change the Strategy.
M&S delivered £671m adjusted profit, a 24% drop after a £300m cyberattack hit. The brand is still reinvesting in value, supply chain and stores. The lesson for Australian retailers: a value position survives a crisis, an inflation position does not.
A value position is not a discount position. M&S is reinvesting in quality at a price, which is a much harder thing to copy than a markdown.
Marks & Spencer has reported a £671m adjusted profit before tax for the year ended 28 March 2026, down from £881m the year before. The £210m drop sits almost entirely with the cyberattack that hit the business in April 2025, costing an estimated £300m and forcing markdown clearance of excess seasonal stock. The notable thing about the result is what the brand did with it. Rather than retreat, M&S has reinforced its value proposition and is moving into what CEO Stuart Machin calls the reinvesting for growth phase of the transformation.
Food was the standout. Volume growth continued through the year, driven by reinvestment in value, quality and innovation, plus an accelerated store opening programme. The food business has been the engine of the wider turnaround for years, and the cyber incident did not slow its momentum.
Clothing and home took the harder hit, with adjusted operating profit dropping from £478m to £213m as the business cleared excess stock that had been stuck in the supply chain during the incident. The recovery plan for the segment leans on three programmes: supply chain modernisation, technology transformation and store rotation.
Why it matters
Australian retailers are watching Coles and Woolworths face the same trust questions that have been rolling through UK supermarkets for years. Four in five Australians believe the supermarkets are ripping them off, and private label has hit $46 billion in domestic spend. The M&S playbook is the template for the response. Reinvest in value perception through quality at a fair price rather than chase the bottom of the market with deeper discounts.
The other lesson is structural. The cyber incident gutted profit for a full year. The brand position did not move. Customers stayed. The transformation continued. That is what a strong brand actually buys a business. Operational resilience plus customer permission to recover.
For Australian retailers facing margin pressure, supply chain volatility or cyber risk, the M&S response is a working case study in not pivoting under stress. The strategy that was right before the incident is the strategy you continue after it.
M&S delivered £671m adjusted profit in FY26 despite a £300m cyberattack hit, with the brand reinvesting through the crisis rather than retreating
What to do about it
Separate your value proposition from your discount activity. A discount is a price tactic. A value position is a quality and trust claim. The two are easy to conflate and the second is much harder to copy.
Reinvest through pressure rather than cutting. If your strongest brand attribute is value, the wrong move in a margin squeeze is to cut the things that build value perception. Marketing, product quality, customer experience.
Map your operational resilience honestly. A 12-month profit hit from a cyber incident is the kind of risk that needs board-level scenario planning. The brands that recover are the ones that planned for the recovery, not the ones that improvised it.
Measure trust as a primary brand metric. Net Promoter Score, brand consideration, willingness to recommend. Sales lag trust by 12 to 24 months in most categories. Watch the leading indicator.
Learn from the food category playbook. Volume growth through value reinvestment plus channel expansion. That formula is portable across most retail categories with the right execution.
M&S is a long-form lesson in not losing your nerve when the operating environment goes sideways. Australian retailers in similar margin territory should be reading the FY26 report cover to cover.