The incident, recognized on May 13, 2025, involved unauthorized access to customer data during a cyberattack last month. While the company reassured customers that sensitive card details and passwords remained secure, it could not guarantee the safety of personal information such as contact numbers and birth dates. This breach follows a series of cyberattacks affecting other major retailers in the UK, like Harrods and Co-op, highlighting a concerning trend of growing cybercrime targeting businesses and institutions.
M&S Confirms Customer Data Breach Due to Cyberattack

M&S Confirms Customer Data Breach Due to Cyberattack
British retail giant Marks & Spencer has reported a data breach that may have compromised customer personal information, halting online order capabilities for weeks.
Marks & Spencer, known for its extensive product range and significant financial presence with reported revenues exceeding £13 billion, promptly reported the incident to law enforcement. While the nature of the attacks and the identity of the perpetrators remain unclear, Britain's National Cyber Security Center has stepped in to support the affected companies and advocates for enhanced security measures to safeguard customer data. Richard Horne, chief executive of the National Cyber Security Center, emphasized the urgency for organizations to bolster their defenses against such threats.