British retailer Marks & Spencer has resumed click-and-collect orders for clothing, home, and beauty products, nearly four months after suspending the service in the wake of a cyberattack and data theft.

The 141-year-old company halted online orders for clothing and home delivery, as well as in-store collection, on April 25 — three days after disclosing it was managing a “cyber incident.” Delivery orders resumed gradually from June 10, but click-and-collect remained offline until Monday.

M\&S did not immediately respond to requests for comment. Shares in the company rose 1% in early Monday trading, trimming year-to-date losses to 11%.

Analyst Kate Calvert of Investec described the reinstatement as a key signal to consumers that operations were returning to normal. She said she did not expect the hack to affect the retailer’s long-term valuation or growth prospects.

In May, M&S estimated the cyberattack would cost about £300 million ($404 million) in lost operating profit in the 2025/26 financial year, though it aims to halve the hit through insurance claims and cost controls.

The attack forced M&S to take other systems offline, reducing product availability in both clothing and food and handing an advantage to rivals such as Next in apparel and Sainsbury’s in groceries. CEO Stuart Machin told investors in July that the retailer expected to be past the worst of the disruption by August.

Chairman Archie Norman later told lawmakers the company believed the ransomware assault was carried out by the hacker group DragonForce. UK police arrested four people in July in connection with the incident and other cyberattacks targeting the Co-op and Harrods.