M&s warning urges customers to 'be cautious' following cyber attack

M&S HAS ISSUED GUIDANCE TO ITS CUSTOMERS FOLLOWING ITS CYBER ATTACK 10:08, 22 May 2025 M&S has warned customers to "be cautious" amidst the ongoing effects of the cyber

attack. The brand was hit by a "cyber incident" last month, which has caused disruption for the company and its customers, with many services put on pause. Under its 'help and

support page,' the retailer has published a set of guidelines regarding what the cyber attack could mean for customers, and what to do next. The guidance from M&S follows its

latest statement, which explained how some personal information may have been stolen when hackers attempted to infiltrate the store. READ MORE: ANYONE WHO'S PLACED ONLINE ORDER WITH

M&S PREVIOUSLY URGED TO ACT It explains: "The personal data taken could include contact details - such as name, email address, addresses, telephone number - date of birth, online

order history, household information and ‘masked’ payment card details used for online purchases. Article continues below "For clarity and reassurance, M&S does not hold full

payment card details on its systems, which is why we use the term ‘masked’. The website continues: "In addition, if you have or previously had an M&S credit card or Sparks Pay, your

customer reference numbers, which are not your credit card number or payment details, could also be included. Importantly, the data does not include useable card or payment details."

As well as describing what the cyber attack may mean for some clients of the brand, M&S added further information over what to do, and what to expect due to the breach. The giant said

customers do not need to take action, but it is possible they may receive correspondence from sources posing as M&S. It said: "You do not need to take any action, but you might

receive emails, calls or texts claiming to be from M&S when they are not, so do be cautious. "We will never contact you and ask you to provide us with personal account information,

like usernames, and we will never ask you to give us your password." READ MORE: M&S CUSTOMERS EXPRESS 'FRUSTRATION' AFTER CYBER ATTACK IMPACTS SECURITY ACCESS M&S

continued, issuing advice over what shoppers can do to stay safe online: * "Be careful if you receive an email or text message asking you to click on a link – check it goes to where you

expect it to * Use a strong and unique password for your email account and use different passwords for each account you have * Always do your software updates on your phones and devices as

they often contain important security updates to protect you * If you need more help, there is some good advice on the government’s National Cyber Security Centre website

www.ncsc.gov.uk/guidance/data-breaches" The supermarket was hit by a cyber attack at the end of April, with disruption still ensuing for the brand and its customers. While online

ordering services are still paused, it was reported M&S' website itself was completely down last night (May 21), according to the Daily Express. Customers who visited the site were

greeted with a message, stating: "Sorry you can't browse the site currently. We're making some updates and will be back soon." Article continues below The website is

since online once more, with shoppers free to browse the site.