- Advertisement -
- M&S confirms that customer information was taken after a cyber attack
- The attack has caused considerable disruption
- Online orders are still influenced weeks later
In a letter to customers, retail giant tracks and spencer have revealed that personally identifiable information (PII) has been stolen by cyber criminals. This follows the Cyber attack that hit M&S Who forced the company to disable, click and collect online store assignments, and contactless payments in some stores.
A statement, Posted on LinkedInconfirms that “unfortunately some personal customer information has been taken”, but that “it is important that there is no evidence that the information has been shared and does not contain usable card or payment data, or account passwords, so it is not necessary to do customers.”
Online orders are still suspended for the shop site and some product availability is influenced. The incident, that one ransomware Attack, took systems offline and caused unmistakable disruption of the operation of the retailer.
Continuous disruption
Returning customers will be asked to reset their passwords on the online site of the M&S online the next time they “to give customers an extra peace of mind”, and the company has assured customers that it “works around the clock to get things back to normal” for its customers.
“The attack on M&S is another grim reminder that ransomware gangs evolve faster than traditional defenses can do the head,” says Camellia Chan, CEO and co-founder of AI CyberSecurity Firm X-PHY.
“Prevention must be built in from the ground. Companies need a multi-layered approach that combines the security at hardware level to detect and block attacks early. This must be combined with an AI-driven threat detection layer that is automated in real time.
If someone is worried about his data, we recommend using a dark web monitoring service or using a infringement monitor, such as such as Have I been pwned? To check for possible expansions.
Maybe you like it too
- Advertisement -