Marks & Spencer Suffers Cyberattack: Your Data’s Not on Sale, But Be Wary!
Marks & Spencer revealed a cyberattack over Easter, compromising customer data like names and addresses. The DragonForce ransomware group claimed responsibility. M&S reassures that no payment card details were exposed, but advises caution against phishing attempts. The incident forced a halt on online purchases, leaving customers to shop the old-fashioned way: in-store.

Hot Take:
Well, it looks like the Easter Bunny brought a basket full of data breaches instead of chocolate eggs this year! Marks & Spencer has joined the unfortunate club of companies who have had their customer data swiped by cybercriminals. Perhaps they should consider changing their slogan to “This isn’t just any data breach; this is an M&S data breach.” Time to change your passwords, folks, and maybe avoid those suspiciously good deals from “M&S” in your inbox!
Key Points:
- M&S customer information was stolen during a cyberattack over the Easter holiday.
- The attack is linked to the DragonForce ransomware group, also known for targeting Co-op and Harrods.
- Compromised data includes personal details and ‘masked’ payment information but not full card details.
- M&S has reset user passwords and informed customers of the breach.
- Customers are warned to be cautious of fraudulent communications pretending to be from M&S.