M&S Warns Customers of Potential Scams and Phishing Attempts Following Cyber Attack

Marks and Spencer customers have been advised to stay vigilant for scams and fraud after a cyber attack on the retailer. The company has confirmed that some personal data, including names, email addresses, postal addresses, and dates of birth, was potentially accessed. However, payment or card details, account passwords, and financial information are not believed to have been compromised. Cyber security experts are urging potentially affected customers to be cautious of phishing attempts, where criminals pose as legitimate businesses to obtain personal and financial information.

Key Takeaways:

• Marks and Spencer has confirmed that a cyber attack on the company resulted in the potential theft of personal data, including names, email addresses, postal addresses, and dates of birth.
• Cyber security experts warn that threat actors could use the stolen information to launch targeted social engineering attacks.
• Customers are advised to be wary of phishing messages pretending to be from M&S or other companies they have dealt with.
• Scammers may use the leaked information to craft convincing scams, and the data could be sold on the dark web, putting customers at risk.
• Customers are advised to visit a company's website directly to verify any claims, rather than clicking on links in suspicious emails.
• Different experts pointed out the risks of social engineering attacks and phishing attempts after the hack.

Statistics:

• The stolen data includes names, email addresses, postal addresses, and dates of birth of Marks and Spencer customers.
• Payment or card details, account passwords, and financial information are not believed to have been compromised in the cyber attack.
• Cyber criminals are likely to sell the stolen data on the dark web, putting customers at risk of further attacks.
• 25% of data breaches involve social engineering tactics (Source: Cybersecurity Ventures)
• In 2020, 55% of security professionals reported a phishing-related incident at their organization (Source: HYPR)

Sources:

• "M&S confirms cyber attack compromise customer data" by BBC News
• "Cyber attack: What are the risks to your data?" by The Guardian
• "2019 Cybersecurity Threat Report" by Cybersecurity Ventures