Marks & Spencer Hit by Cyber Attack: Customer Data Stolen
A significant cyber attack on Marks & Spencer (M&S) has resulted in the theft of customer data, the company has confirmed. The attack, which began over the Easter weekend, caused widespread disruption to the retailer’s services, including Click & Collect and contactless payments in stores.
According to reports, M&S was dealing with a “cyber incident” and, as a result, suspended online orders on its website and app on 25 April. While in-store services have since resumed, the company has yet to confirm when online orders will resume. A spokesperson for M&S told the BBC that the company was working to restore its online services as soon as possible.
The cyber attack on M&S is believed to have been carried out by a group of hackers known as DragonForce, who have also recently targeted Co-op and Harrods. As reported by the BBC, DragonForce uses a double extortion method, which involves stealing a copy of their victim’s data as well as scrambling it to make it unusable. The hackers can then demand a ransom for both unscrambling the data and deleting their copy.
“It is inevitable that customer data has been stolen as part of the ongoing cyber attack,” a cybersecurity expert told the BBC. “The nature of the attack means that the hackers would have had access to sensitive information, including customer data.” M&S has confirmed that it is working with law enforcement and cybersecurity experts to investigate the attack and protect its customers.
The incident highlights the growing threat of cyber attacks on businesses and the importance of robust cybersecurity measures. As reported by the BBC, DragonForce is a notorious cyber crime service that has been responsible for a number of high-profile attacks in recent months. The group’s tactics, which involve using a double extortion method, have been widely condemned by cybersecurity experts.
The BBC understands that M&S is taking steps to prevent similar attacks in the future, including enhancing its cybersecurity measures and working with law enforcement to bring the perpetrators to justice. In the meantime, customers can rest assured that the company is doing everything in its power to protect their sensitive information. As M&S told the BBC, “We take the security of our customers’ data very seriously and are working tirelessly to resolve the issue as quickly as possible.”
The incident serves as a reminder to businesses and individuals alike of the importance of cybersecurity and the need for vigilance in the face of growing cyber threats. As the investigation into the attack continues, the BBC will provide updates on the situation.
Source: BBC News
Source link
