Marks & Spencer has confirmed that personal customer data was accessed in a recent cyber-attack, prompting the retailer to halt online orders and affecting product availability in stores.
The accessed data includes names, addresses, and order histories, but not payment details or account passwords. M&S reassured customers that no action is required, although a password reset may be prompted for extra security.
The cyber-attack, suspected to be linked to hacking group Scattered Spider, led M&S to take offline its IT systems since April 25. The retailer has reported the incident to authorities and is working to resolve the issues with cybersecurity experts.
The Information Commissioner's Office is investigating reports from M&S and the Co-op Group, another victim of a cyber-attack, collaborating with the National Cyber Security Centre to address such incidents.