M&S admits customer data was stolen in cyber attack

Summary

Marks & Spencer (M&S) has confirmed a cyber attack that led to the theft of customer data, causing significant operational disruptions for the retailer. Affected customers are being notified over three weeks after the incident. M&S CEO, Stuart Machin, stated while personal information was accessed, there is no evidence of it being shared, and sensitive data like payment details remain secure. The attack has resulted in a halt of online orders, empty store shelves, and a marked decline in M&S’s share price.

Key Points

  • M&S has confirmed that customer data was stolen during a cyber attack affecting operations.
  • The attack forced the retailer to pause online orders for nearly three weeks.
  • Despite some personal information being accessed, payment details and passwords were not compromised.
  • Supply chain disruptions resulted in empty shelves and a significant drop in share prices.
  • An insider highlighted a lack of a proper cyber attack plan and described the aftermath as chaotic.
  • M&S has engaged cybersecurity experts and reported the incident to the National Cyber Security Centre.

Why should I read this?

If you want to stay ahead in the ever-evolving landscape of cybersecurity and retail mishaps, this article’s one for you! M&S’s cyber attack highlights the urgent need for robust data protection measures and could have implications for consumer trust in retail processes. It’s a real eye-opener for anyone concerned about personal data security.

Source: Tech Digest