M&S Data Breach: Unveiling the Stolen Information and Measures for Self-Protection
Marks & Spencer (M&S) has recently confirmed a cyberattack last month, resulting in the theft of customers' data. Here's what you need to know to safeguard your personal information and avoid future scams.
Stolen Data Details
M&S revealed that names, addresses, phone numbers, and partial card information might have been accessed during the data breach. With around 9.4 million online customers [1], it remains unclear how many customers were affected.
Who Is at Risk?
Though M&S claims no passwords or payment details were taken, the stolen data could still be used for identity fraud [2]. Consumers need to remain vigilant.
Protect Your Data
- Change your passwords: Alter the passwords associated with your M&S account and other accounts with similar passwords to ensure they are unique.
- Beware of scammers: Keep an eye out for suspicious emails or calls impersonating legitimate organizations, especially in the wake of the data breach.
- Verify all communications: Don't provide personal details over the phone or via email, and reach out directly to the company to confirm their identity.
Who's Behind the Attack?
The ransomware and extortion gang, DragonForce, allegedly claimed responsibility for the cyberattacks on multiple UK retailers, including M&S [3]. The group has reportedly targeted other stores around the same time. Stay vigilant, as the culprits may potentially aim at other retailers in the future.
Stay Informed
The investigation into the M&S data breach is ongoing [4]. Keep yourself updated on the latest developments and stay proactive in protecting your personal information to avoid potential scams.
- Technology
- cyber security
- Fraud
- Identity theft
- Enrichment Data:
- Current Status of the Investigation: The investigation into the Marks & Spencer data breach is ongoing. While the stolen data has not been shared, customers are advised to remain vigilant due to potential phishing attempts using the stolen personal information.
- Suspected Parties: The attack is suspected to have been carried out by hackers linked to groups involved in previous high-profile breaches, such as those at MGM and Caesars. The attack is classified as a ransomware attack, raising significant privacy concerns for millions of customers. Despite reassurances, customers are advised to remain vigilant and take necessary precautions to protect their personal information.
- Timeline: The breach occurred on April 22, 2025, and M&S has taken measures to enhance customer security, such as prompting users to reset their passwords upon their next login.
- As a result of the M&S cyberattack, it's crucial to prioritize cybersecurity measures, especially in regards to personal-finance information, to protect against potential identity theft and fraud.
- In light of the ongoing investigation into the M&S data breach, staying current with technology advancements in cybersecurity is essential to safeguard your personal, financial, and identity information.
