Summary: UK retailer Marks & Spencer is currently managing a cybersecurity incident that has disrupted store operations, including its Click & Collect service. While the extent of the data breach remains unclear, the company is working with external cybersecurity experts and has reported the situation to relevant authorities. Customers have expressed frustration over service interruptions and raised questions about the company’s preparedness for such incidents.
Affected: Marks & Spencer
Keypoints:
- Marks & Spencer disclosed the breach after several days of service disruptions.
- The company is collaborating with external experts and has reported the incident to the National Cyber Security Centre.
- Customer data compromise has not yet been confirmed, leading to public concern.
- Some services, including Click & Collect, are still affected as of April 22, 2025.
- Customers have criticized the lack of basic contingency plans during the cyber incident.
Source: https://thecyberexpress.com/marks-and-spencer-data-breach/