A cyberattack on Marks and Spencer compromised personal data of nearly 9.4 million customers, exploiting a vulnerability created by human error.
Hackers accessed sensitive information including order histories, dates of birth, and partial payment card details, but not complete card data.
M&S reassured customers that full payment card details were not accessed due to limited data storage, with potential impact on online ordering.
Increase in scam messages and emails reported by customers following the cyberattack, urging vigilance against potential spam campaigns using stolen information.