EU and US could reach trade deal this weekend - Reuters
LONDON - Marks and Spencer Group plc (LSE:LON:MKS) has issued a new statement today concerning the cyber incident first reported on April 22, 2025. The British retailer confirmed that certain customer personal data has been compromised due to what is described as a sophisticated cyber attack.
M&S has taken several measures in response to the breach, including engaging top cyber security experts and informing the relevant government authorities and law enforcement with whom they are working closely. The company has stressed that the compromised data does not include useable payment card details or account passwords and that there is no indication the data has been distributed.
Customers affected by the incident have been contacted by M&S and advised that no immediate action is required on their part. However, as a precaution, customers will be prompted to change their passwords during their next account login. M&S has also provided customers with guidance on how to maintain online safety.
The retailer expressed its gratitude for the support received from customers, employees, partners, and suppliers in the wake of the cyber incident. M&S reassured stakeholders that it is managing the situation proactively and remains committed to safeguarding customer information.
This update follows the initial announcement of the cyber incident and is part of M&S’s ongoing communication to keep customers and investors informed. The company’s swift response to the cyber attack underlines the growing challenges businesses face in protecting digital data.
The information in this article is based on a press release statement from Marks and Spencer Group plc.
This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.