Details taken are names, addresses and Marks & Spencer order histories, the Guardian understands<ul><li><a href=”https://www.theguardian.com/business/live/2025/may/13/uk-wage-growth-slows-payrolls-vacancies-drop-thames-water-mps-us-inflation-business-live-news”>Business live latest updates</li></ul>Marks & Spencer has said for the first time that some personal customer information was taken in the <a href=”https://www.theguardian.com/business/marksspencer”>cyber-attack that has crippled its online operation for more than three weeks.Since the retailer’s IT systems were hit by a ransomware attack, it has <a href=”https://www.theguardian.com/business/2025/apr/25/marks-and-spencer-pauses-online-orders-cyber-attack-fallout”>not been taking online orders, and the availability of some products in its stores has been affected after it took some of its systems offline in response. <a href=”https://www.theguardian.com/business/2025/may/13/m-and-s-personal-data-cyber-attack-marks-spencer-card-passwords”>Continue reading…
First seen on theguardian.com
Jump to article: www.theguardian.com/business/2025/may/13/m-and-s-personal-data-cyber-attack-marks-spencer-card-passwords
