Marks & Spencer Wipes £1 Billion off the Value of the Company - Due to Cyber Attack

Marks & Spencer has revealed that some personal customer data was stolen in the recent cyber attack, which could include telephone numbers, home addresses and

dates of birth.

The High Street giant said the personal information taken could also include online order histories, but added the data theft did not include useable payment or card details, or any account passwords.

The retailer, whose 1,000 stores remain open, is widely reported to have been the victim of a ransomware attack, where criminals infiltrate companies' computer systems, encrypt them and demand payment before allowing them to resume control.

In a social media post, Mr Machin said there is “no need for customers to take any action”.

“To give customers extra peace of mind, they will be prompted to reset their password the next time they visit or log on to their M&S account and we have shared information on how to stay safe online,”

he said.

The group has not been able to take any orders through its website or app since April 25 as it tries to resolve the problem.

The incident first caused problems for the retailer’s contactless payments and click and collect orders, while it has also impacted some availability in stores.

A slump in the share price has wiped around £1 billion off the value of the company which presents its full year results later this month.