Archive — US — techcrunch
Marks & Spencer confirms customers’ personal data was stolen in hack
Marks & Spencer has confirmed that customers' personal data was stolen during a cyberattack last month, impacting online and physical store operations. The breach may involve data from the retailer's 9.4 million online customers, including names, addresses, and order histories. The ransomware group DragonForce claimed responsibility, with other U.K. retailers also affected.
Key points
- Marks & Spencer revealed that hackers stole customer personal information including names, dates of birth, and email addresses during a cyberattack.
- The company is resetting online account passwords as a precautionary measure.
- Operational disruptions were noted, with some grocery shelves empty and the online ordering system down.
- DragonForce, a ransomware group, took credit for the attack impacting several U.K. retail giants, including the Co-op and Harrods.
- The Co-op initially denied evidence of a data breach but later confirmed customer data was stolen.
- The U.K. National Cyber Security Centre is collaborating with victims and law enforcement to investigate.
Why it matters
- The incident aligns with growing concerns over cybersecurity in retail, particularly as cyberattacks become more prevalent.
- The rise of ransomware attacks, particularly targeted at high-profile companies, is a notable trend in IT security.
- Cybersecurity measures are critical as companies increasingly rely on digital operations, particularly in retail.
The Marks & Spencer cyberattack highlights ongoing vulnerabilities in retail cybersecurity, emphasizing the need for robust protective measures and public transparency as more data breaches occur.