Marks & Spencer Investigates Cyberattack Impact on Customer Data

Marks & Spencer has reported a data breach affecting customer information, prompting a suspension of online orders while investigations are underway.

Marks & Spencer (M&S), a leading British retail giant, announced on Tuesday that a cyberattack last month has compromised certain customer data, resulting in a significant disruption to their online services. In a communication to customers, the company stated that unauthorized access may have occurred, potentially revealing personal information such as contact details and birth dates. However, M&S reassured its customers that no payment information or passwords had been accessed during the breach.

This incident has paralleled a series of cyberattacks targeting UK retailers. Notably, luxury department store Harrods faced temporary disruptions in late April as a precaution against cyber threats. Similarly, Co-op, another retailer, disclosed that it experienced a cyber incident that affected some of its back office and call center operations.

Ransomware attacks, which aim not only to steal data but also to disrupt services, have been escalated in recent years, raising alarms across industries. In fact, a significant incident last year targeted hospitals in Britain, leading to the cancellation of hundreds of surgeries and outpatient appointments due to crippling cybersecurity breaches.

The identity of the attackers remains unknown, and investigations are ongoing. In response to the growing concern, Britain’s National Cyber Security Center has stated they are collaborating with affected businesses to assess the situation. Richard Horne, the chief executive of the agency, emphasized that these incidents underscore the urgent need for organizations to strengthen their cybersecurity measures to safeguard against future attacks.

As M&S continues its investigation, customers are advised to remain vigilant regarding their personal data and to follow any given recommendations from the retailer.