Newsroom
Marks & Spencer said Monday that some customer data was compromised in a cyberattack that has disrupted its online operations in the U.K. for at least three weeks.
The British retailer, known for its clothing, food, and beauty products, halted online orders on April 25. The company’s stock has fallen about 15% since the Easter weekend, when the technical issues first emerged.
According to Reuters, the company is believed to have been targeted in a ransomware attack, a type of cybercrime in which hackers encrypt a company’s systems and demand payment to restore access.
Marks & Spencer said the breach involved limited personal data and was due to the “sophisticated nature” of the attack. The company said it is notifying affected customers and continuing to investigate.
“It’s important to note that the data does not include payment or card information, which we do not store, and it does not include account passwords,” the company said in a statement. “There is no indication that any of the data has been shared.”
The company said customers do not need to take any action and that efforts to restore online services are underway. Security measures have been strengthened, it said.
