Sign in Subscribe
Cyberterrorism

Marks & Spencer Reveals Customer Data Stolen in Cyber-Attack

Strategic Insights

— 1 min read

Marks & Spencer has acknowledged that hackers accessed some customer personal data during a sophisticated cyber-attack that started last month. The incident, which has caused inconvenience for customers, has not compromised payment or card details, or account passwords. The company has assured customers that there is no need for them to take any action, but has instead prompted them to reset their passwords. The attack has also impacted the retailer's ability to process online orders, with the website and app unavailable since April 25.

Key Takeaways:

  • Marks & Spencer has confirmed that customer personal data was accessed by hackers during a cyber-attack that began last month.
  • The stolen data does not include payment or card details, or account passwords, and customers have not been advised to take any action.
  • The company has prompted customers to reset their passwords and has shared information on how to stay safe online.
  • The attack has impacted Marks & Spencer's ability to process online orders, with the website and app unavailable since April 25.
  • The retailer has not commented on the specifics of the attack, but has linked it to a hacking group operating under the name Scattered Spider.
  • Customers have expressed frustration with the delays to their orders, with Marks & Spencer apologizing for any inconvenience caused.
  • The company's stores remain open, and employees are working around the clock to resolve the issue.
  • Marks & Spencer has expressed gratitude to customers for their continued support during this challenging time.

Statistics:

  • The cyber-attack began last month, although the exact date is not specified.
  • Since April 25, Marks & Spencer has been unable to process online orders through its website or app.
  • The retailer's contactless payments and click and collect orders have also been impacted by the attack.
  • The stolen customer data has not been compromised, and there is no evidence of it being shared with third-parties.
  • The hacking group behind the attack has been identified as operating under the name Scattered Spider.

Sources:

  • "Marks and Spencer cyber attack: Data breach affects thousands of customers" by Antony Cooper, April 25, [1]
  • Marks and Spencer Facebook page, [2]
  • "UK Retailers' Cybersecurity Threats On The Rise, But There's A Silver Lining" by John Bissell, [3]

Read more