Cyber Incident - Further Update

MARKS AND SPENCER GROUP PLC

CYBER INCIDENT - FURTHER UPDATE

Marks and Spencer Group plc ("M&S") is providing a further update on the cyber incident reported on 22 April 2025.

As part of our proactive management of the incident, we have made the decision to pause taking orders via our UK & Ireland websites and apps and some M&S International operated websites. The M&S product range is available to browse online, and our stores remain open and ready to welcome and serve customers.

We continue to manage the incident proactively and the M&S team - supported by leading experts - is working extremely hard to restore online operations and continue to serve customers well.

We previously informed customers that there was no need to take any action. That remains the case, and we will let them know, if the situation changes.

We remain grateful for the support that our customers, colleagues, partners and suppliers have shown during this time and will provide further updates, as appropriate.

-Ends-

For more information, please call:

Investor Relations: Fraser Ramzan +44 (0) 7554 227 758

Corporate Press Office: +44 (0)20 8718 1919