M&S customer data was stolen in last months cyberattack how to stay safe

Published: Tuesday, May 13, 2025 at 7:57 pm

M&S Cyberattack: Customer Data Stolen, Here's How to Stay Safe

Marks & Spencer (M&S) customers are advised to be vigilant following a cyberattack last month that resulted in the theft of customer data. The attack, which occurred on April 22, 2025, involved the use of "Scattered Spider" social engineering tactics to breach the network and encrypt VMware ESXi virtual machines. This caused significant disruption, forcing M&S to temporarily halt online orders.

The company has confirmed that customer data was compromised. This includes full names, email addresses, home addresses, phone numbers, dates of birth, online order history, household information, Sparks Pay reference numbers, and masked payment card details. While M&S has stated that there's no evidence the stolen data has been shared or that usable card details were taken, customers are still urged to take precautions.

M&S is prompting all active account holders to reset their passwords the next time they log in via the website or app. Experts recommend this as a standard security measure after a data breach. Additionally, customers should be wary of phishing attempts. Be cautious of any emails, calls, or texts claiming to be from M&S and requesting personal information like usernames or passwords. Never provide personal details to anyone claiming to represent the company. Consider using a password manager for enhanced security and explore identity theft protection services to safeguard against potential fraud.

The investigation revealed that DragonForce ransomware affiliates were responsible for the attacks. M&S has written to customers to inform them of the details.

Keywords: M&S, Marks and Spencer, cyberattack, data breach, customer data, stolen data, phishing, password reset, online security, identity theft, DragonForce, ransomware, personal information, security, fraud, online orders, email addresses, home addresses, phone numbers, dates of birth, order history, Sparks Pay, payment card details, how to stay safe.

Full Story