M&S says customer data stolen in cyber attack

Marks & Spencer has revealed that immoderate idiosyncratic lawsuit information has been stolen successful the caller cyber attack, which could see interaction details and day of births.

The High Street elephantine said the idiosyncratic accusation taken could besides see online bid histories, but added the information theft did not see useable outgo oregon paper details, oregon immoderate relationship passwords.

M&S was deed by the cyber onslaught immoderate 3 weeks agone and is inactive struggling to get services backmost to normal, with online orders inactive suspended.

The retailer said customers would beryllium prompted to reset passwords for accounts "for other bid of mind".

M&S main enforcement Stuart Machin said the institution was penning to customers connected Tuesday to pass them that "unfortunately, immoderate idiosyncratic lawsuit accusation has been taken".

"Importantly, determination is nary grounds that the accusation has been shared," helium added.

M&S confirmed the interaction accusation stolen could include:

• People's names
• Date of birth
• Telephone number
• Home address
• Household information
• Email address
• Online bid past

The retailer added immoderate paper accusation taken would not beryllium useable arsenic it does not clasp afloat paper outgo details connected its systems.

In an email to customers, M&S operations manager Jayne Wall said: "You bash not request to instrumentality immoderate action, but you mightiness person emails, calls oregon texts claiming to beryllium from M&S erstwhile they are not, truthful bash beryllium cautious.

"Remember that we volition ne'er interaction you and inquire you to supply america with idiosyncratic relationship information, similar usernames, and we volition ne'er inquire you to springiness america your password."

Mr Machin said M&S was "working astir the timepiece to get things backmost to normal" arsenic rapidly arsenic possible.

M&S began experiencing problems with its systems connected 25 April, erstwhile determination were issues with in-store payments earlier they dispersed to different parts of the organisation.