Marks & Spencer disclosed a cybersecurity incident in April 2025 and implemented system isolation and operational adjustments [1]. Reuters reported that the company temporarily halted online orders in the UK and Ireland [2]. M&S subsequently informed customers that some personal data had been taken, though it did not include usable payment card details or account passwords [3].
Backfill: this event became public on Apr 22, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
Marks & Spencer Discloses Cybersecurity Incident, Later Confirms Customer Personal Data Taken
1 min read
- Disclosed
- Apr 22, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
M&S subsequently informed customers that some personal data had been taken, though it did not include usable payment card details or account passwords [3].
Timeline
Technical details
Source-Supported Details
This advisory does not independently attribute the incident to a specific group unless named on official pages [1].
Source excerpt: "If you have questions that have not been answered here, please head to www.marksandspencer.com/help-and-support/contact/cyber-incident – we are here to help." [1].
References
Official / primary1
- [1]
“If you have questions that have not been answered here, please head to www.marksandspencer.com/help-and-support/contact/cyber-incident – we are here to help.”
Media2
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.